[Snort-devel] Branyard crash

Steve Halligan agent33 at ...269...
Tue Nov 20 08:02:03 EST 2001


Below is barnyard output from a crash I have been getting alot lately.  I
cut out a bunch of cruft and left a representive sample of the output,
including the crash.  I can provide the unified snort log also, but it is
~7mb so I didn't want to send it to the list.


loading Data Processors...
dp_alert loaded
dp_log loaded
dp_stream_stat loaded
Loading Built-in Output Plugins...
Fast Alert plugin initialized
AlertSyslog initialized
Log Dump plugin initialized
LogPcap initialized
AcidDb output plugin initialized
AlertHtml output plugin initialized
AlertCSV initialized
Parsing Config file: /etc/snort/barnyard.conf
Args: mysql, sensor_id 4, database snort, server zz.qq.dd.gg, user blah,
password mindyourownbusiness, detail full

   --== Initializing Barnyard ==--


   --== Initialization Complete ==--


-*> Barnyard! <*-
Version 0.1.0-beta5-dev (Build 6)
By Andrew R. Baker (andrewb at ...835...)
and Martin Roesch (roesch at ...402..., www.snort.org)

AcidDbOpStart
cid == 48913
AcidDbOpStart Complete
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '54995',
'846', '2001-11-19 04:35:14')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '54996',
'845', '2001-11-19 04:35:15')
Unknown Network header (0x0)...
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '54997',
'1152', '2001-11-19 04:48:43')
Unknown Network header (0x0)...
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '54998',
'844', '2001-11-19 05:08:38')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '54999',
'845', '2001-11-19 05:08:39')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55820',
'846', '2001-11-19 13:53:49')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55821',
'846', '2001-11-19 13:53:49')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55822',
'846', '2001-11-19 13:53:50')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55823',
'845', '2001-11-19 13:53:50')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55824',
'847', '2001-11-19 13:53:50')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55825',
'846', '2001-11-19 13:53:51')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55826',
'846', '2001-11-19 13:53:51')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55827',
'845', '2001-11-19 13:53:52')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55828',
'845', '2001-11-19 13:53:52')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55829',
'845', '2001-11-19 13:53:53')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55830',
'845', '2001-11-19 13:53:54')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55831',
'846', '2001-11-19 13:53:55')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55832',
'846', '2001-11-19 13:53:57')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55833',
'846', '2001-11-19 13:53:57')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55834',
'845', '2001-11-19 13:53:58')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55835',
'844', '2001-11-19 13:54:44')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55836',
'845', '2001-11-19 13:54:44')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55837',
'845', '2001-11-19 13:54:45')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55838',
'846', '2001-11-19 13:54:45')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55839',
'847', '2001-11-19 13:54:45')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55840',
'846', '2001-11-19 13:54:45')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55841',
'846', '2001-11-19 13:54:46')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55842',
'845', '2001-11-19 13:54:46')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55843',
'845', '2001-11-19 13:54:47')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55844',
'845', '2001-11-19 13:54:47')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55845',
'845', '2001-11-19 13:54:47')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55846',
'846', '2001-11-19 13:54:47')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55847',
'846', '2001-11-19 13:54:48')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55848',
'846', '2001-11-19 13:54:48')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55849',
'845', '2001-11-19 13:54:48')
SQL: INSERT INTO event(sid, cid, signature, timestamp) VALUES('4', '55850',
'1135', '2001-11-19 13:55:23')
Error (You have an error in your SQL syntax near
''130000000413C617820000095D00FC080000640082052A1A1500000100E200E14567FFFFFF
FFFFF' at line 1) executing query: INSERT INTO data(sid, cid, data_payload)
VALUES('4', '55850',
'130000000413C617820000095D00FC080000640082052A1A1500000100E200E14567FFFFFFF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!
783864382D461B3F314FA71139406C274E374650A0C6501E8AE091F06939630EFCD31172C6E8
DBF2913C6B599DB234845678101B4BF075A296B438A1D0A0E0BC72C0D8B78044457D00FE2228
8E94F440037B1169C4A0F6882DB4C66221CB6363C0EC469F4D81F34D48CA1D43B4566769B010
3F78A814E9E9B07111AA484E38291225F8FE882941D6F06C87F028AD60FC029F948A4EAC8924
5011A328153F1213787A9C7ACF37FBBD99D81D4E2015B8FE6B69FEA56F650ADBECFD5DE6150B
06FFEF142A049A7C003EE7609C45160C585A39ABEA8F1B276EDA49C2309AA224E42504B23C70
C5B8A4B42BEA2749C9C7BE6E6C42B115C504C580DCA57E13EA453B87F90EBC5E0A278CD96A22
10D5F2DE9A7209FCD875997A82F1715A6A5A462982D47E7A658A1EE279859928719783379D9B
1FFD4F706C36CA4A46261701BB440EB369AFF79212111913FFD20E2DFB74D5A1E2805B53D6EA
9564092C1A9F82974AC092658B9612665233A06E2BC51C5E8DFC1A708C189FF8D83AE20AAC82
2FDADECB4D6109BFC2EF6F7F3FE4117402A2829234AF27C4B036C78ACB1ADF87BD889723C44A
CA5785C69155A9A730FE5816E10281022EC5882B6665E272CDE230B84584DEBBD657EF616228
2713FC0E07A7C40654EF58FD0333A2222E470290431E266301558A2ECE2126A3725760499F04
E!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!
C2C6321C3AE891EF798D1EA8FFF388C0793A507E3D88B4AED173A9565BC0DE314DD8A93C0635
CB33A80776B1A5889AA6E21139347CD52B57CE88BD406E3C1D2B6D542CFA92B5157C84626345
E99880A66E87A22B5A77117A29FC1AD9CFE8645A143808134A396E7D4DEAE2A034E82A44B11A
59BAD4477BD8685075B62CCAB9817043E3142E2A0FEB04774EA0FF98BF771B1DCC7DABC6D6C4
4A15A234DFC80F699426A0ABB8B21037342703EE3D708BB98509AA99F32B791A358FA803BDEB
DFCC5DB9C505108CDAFE4642007ECEB4CC2AEE45908D697F29F5654D27F51E2EA8284A3A4D89
1A104386870585285EB4A0AC4C2016C97311750D15A5876AC0CF22EA10949082CCD65AFDFFE2
E8D780914AB9228AC18D4DF19F89DDAB2271C8A12043FA96EE5FC2808CCE423AB2DDDE1B22CA
D5A72ED83981E518FB44EB4DAAEB6ABDF81E4DC11674E50B8AA52A7C873596191423F42F65A5
331B91433974D69F022508330404EA788BBF50AD7243227B40FED83FD806E0D942CF05C0D295
3F67DAACD167944191353A13122B45B8EBEF3A81EE59584230589A581F02AE6F381F1B8CC8DA
E0E2930D6C7BCE31E0D5174F83447491AC2C1C4FE8DE96110623B174B870B58D2F211DEE482E
584F4B1F9A8651B970313E9441D8B2DA59B8D8E8AF6F6079F9CEC15A0D7BC974BD8B6FB015AD
6!
9678DDE1C0821E81B6796160E62888E85410FC1C6F8DEC99B5091EC1402910A74ACACBFF1500
7A50132D43CD92D5714E870797AC31650FCB3F23F7CAB677829EC7FFCBB8A22EB3D98C022B00
A6D742710038951100E9B7715B514157611C60F097654CB5E95E04E033EA145B135F3CA54DB5
159F33B595C028B4D6A9240AEBD14A6C476D949C6FB1962C5A86250796913EC2F8C6DDDF3222
5AB9D4B043DF87CC37FF879DABF510A82076C723F601549AA8044056838CF6088FA770500055
85D48E3822087DC7C827A56B74D746C12922C5FC2C17F840F0E59C581207B7D2A81B99311292
A4DF2880E8E756220223B006BF7BC96C3CFF8F9E0128CD8F64941B74BB761692E75C64509537
978837D4F825226FB2AB76357B251BD59105220083F037CE03A0088151F654B7AB22BC3F304E
0855D70A5732BA209E495D1A1D0FE458450E51F6D2C927392223C0F12A12FF8A5533F2D9444F
D028110B11DBC6876DB57DC2DAA645B9DE930407415A59571CE089B06D705349F9591FC7801C
759AA6E25B406141231940ACAC7A9F0BFDF07111BC45E29467C097B1EA59F073542805FD7199
3D43A667440D021F88DAA1310783E6F6968D92746FB50750E421C7C857C7BB5D4180C9C24528
7C252ABEEB606769A112046795095E1CD5ECF230F094A498C6B0A70B3CBF270348E22567EABE
A!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!
9D285108235E54A985035689348EC78496159F1D9F29427865261E32C33B9313E14C203A8109
B80E87BEDC42702052894AD279A4A5DF9F686E399EBDB09450679A396BE9BE1A08A8A1FA02A3
D3FB0A507403943340EA4033F58C070F537E76E770B4A833CA2807E3E2E6DB56D1607B4F09C9
07E20B1FFB2D282C9D2A8A4E83B035F2A95010C9A8873C0A65C2A400E88CA068283D66F76CB4
F816191F095806FE5B93A824BA0980E581F16B2A40A58151C1703A7123F7DE55DFDB46414E69
C0E6116CC58E0322A63156B4A12B4A58586D5708D02E6E5E16A2C2AE89C1E1096230945C9E32
3CADFB3F3BDF4536789652632ABF48D75A85BD880917398A2AC9C509303D36E45282D03228FB
43EDDEB530E99DAA68154DCE15FBF22DFBCE9C4B8382236599BF0F2052884112E261E56E2015
E3D7F1266308E3DE3D8514F08B9D63058C8A3CCABA9BD0B287FBDABDA1D490441602812C76BD
E45F394501822B5F6AD241BC329981DDB7338330931CE5DF20279CC16685814175CB32317D25
AAF349245ABC14FEA453CD8A10881D5E02D346A4B208154FC9211A2958557DE03124A49805FA
6A8AE9D7E13A2AE3D6ECCB2542498503CD3B40A26380E574B74A16719636A7BC70B604212132
950ABDD37B675E91F12CB9A2F044FFC15BB3A0231E6101F3B91EEC4C100E4C740068EC7E3C8D
0!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!
A661A6A152AF4A518EC820A61496D9A61FC2B12B65A5E2A81ECD0211608D06E041940A437141
C289747E0E1D30541BDBC703A67E3B6C0CB1BCC445B86DF4C32E6F01538165220499550A0763
EEB4D4E6A9FEE4238B96E366E2026FA91BDCFEC0747C424A2B3BCD1CE66E6167E95299F5A5E1
0D1FEBDCE642245D181585F14DF2969A798EF2230E7430840750387A9F1A6E41BA1ED22AC9FE
02B54E41A154B69B17FCBB3ABC8BBAEBA9594240A9E05AEBFA9148A64533225CE28C1871671B
DF35C2D59404C94FFD3B72F46109C0E0F13B7656215710D58C603AE717C
Fatal Error, Quitting..
Exiting
AcidDbOpStop




More information about the Snort-devel mailing list