[Snort-devel] Errors/core dumps with database logging

Jed Pickel jed at ...7...
Thu Nov 2 13:15:34 EST 2000


> I'm running snort as pulled out of the CVS on 1st Nov.  I'm using the
> database module to log to a remote mysql server and I'm getting
> occasional errors reported in syslog, as well as intermittent sig 11s.
> I'm running on FreeBSD 4.1-STABLE.
> 
> These are the kind of errors : 
> 
> database: mysql_error: You have an error in your SQL syntax near
> ''0001000B0000001200020002000000062A2BB70003B1000000000001000900000002000E4854545'
> at line 1
> 
> I'm working on getting a useful core dump and backtrace...
> 
> Is there any more info that people need me to provide?

Yeah.. Could you send along the "output database" line from your
configuration file? Also, it would be very useful if you could
add a "#define DEBUG" in spo_database.c right after...

  #include "spo_database.h"
  extern PV pv;

Then recompile and send along the output. If you get a backtrace that
would be useful as well.

Thanks,

* Jed



More information about the Snort-devel mailing list