Snort++ Build 239

[Jim Campbell <jim () w4bqp net>]

I built and installed DAQ v.2.2.2 and Snort++ Build 239. I used all the 
configuration and rules files that had worked with the previous build of 
Snort.

jim@jim-IPS:~$ sudo /opt/snort/bin/snort -V

   ,,_     -*> Snort++ <*-
  o"  )~   Version 3.0.0-a4 (Build 239) from 2.9.8-383
   ''''    By Martin Roesch & The Snort Team
           http://snort.org/contact#team
           Copyright (C) 2014-2017 Cisco and/or its affiliates. All 
rights reserved.
           Copyright (C) 1998-2013 Sourcefire, Inc., et al.
           Using DAQ version 2.2.2
           Using libpcap version 1.7.4
           Using LuaJIT version 2.0.4
           Using PCRE version 8.40 2017-01-11
           Using ZLIB version 1.2.8
           Using LZMA version 5.1.0alpha
           Using OpenSSL 1.1.0f  25 May 2017
           Using Hyperscan version 4.4.0 2017-07-15

Snort is outputting a Unified2 file and the u2spewfoo output of that 
file looks normal.

I had stopped and restarted Barnyard2 as part of my updating Snort. 
Barnyard2 isn't happy and is outputting only the following type record 
as per /var/log/syslog:

"Jul 29 14:57:42 jim-IPS barnyard2[32016]: WARNING database 
[Database()]: Called with Event[0x0] Event Type [0] (P)acket 
[0x94de270], information has not been outputed."

Any thoughts as to what I either didn't do or did incorrectly?

Thanks,

Jim

--
"We are not human beings having a spiritual experience;
we are spiritual beings having a human experience."
---Pierre Teilhard de Chardin

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!