<div dir="ltr">Can someone tell me what i have to do to get a response from your side ?</div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Nov 18, 2016 at 7:03 PM, shekhar $on! <span dir="ltr"><<a href="mailto:rajnish.soni89@...2420..." target="_blank">rajnish.soni89@...2420...</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi All,<div><br></div><div>To add more on this issue, i tested further and found that whenever any rule matches, this type of alert got generated for that gid and sid.</div><div><br></div><div>INFO [<wbr>dbProcessSignatureInformation(<wbr>)]: [Event: 59] with [gid: 1] [sid: 10009003] [rev: 1] [classification: 0] [priority: 0]</div><div>         was not found in barnyard2 signature cache, this could lead to display inconsistency.</div><div>         To prevent this warning, make sure that your sid-msg.map and gen-msg.map file are up to date with the snort process logging to the spool file.</div><div>         The new inserted signature will not have its information present in the sig_reference table.</div><div>         Note that the message inserted in the signature table will be snort default message "Snort Alert [gid:sid:revision]"</div><div>         You can always update the message via a SQL query if you want it to be displayed correctly by your favorite interface </div><div><br></div><div><br></div><div>Due to this my BASE is not showing proper signature name and the no of such event is the signature table get increased.</div><div><br></div><div>Please someone reply as i have some urgent delivery pending due to this error.</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Nov 18, 2016 at 2:14 PM, shekhar $on! <span dir="ltr"><<a href="mailto:rajnish.soni89@...2420..." target="_blank">rajnish.soni89@...2420...</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi All,<div><br></div><div>My sig_reference table is not updating with signature name.Its showing Default Snort Alert instead of signature name. Can someone help me here.</div><div><br></div><div><div>| 154975 | Snort Alert [116:412:1]                                                                                                                    |          181 |            3 |       1 |     412 |     116 |</div><div>| 154976 | Snort Alert [116:414:1]                                                                                                                    |          181 |            3 |       1 |     414 |     116 |</div><div>| 154977 | Snort Alert [122:23:1]                                                                                                                     |          156 |            2 |       1 |      23 |     122 |</div><div>| 154978 | Snort Alert [116:408:1]                                                                                                                    |          181 |            3 |       1 |     408 |     116 |</div><div>| 154979 | Snort Alert [116:431:1]                                                                                                                    |          181 |            3 |       1 |     431 |     116 |</div><div>| 154980 | Snort Alert [122:24:1]                                                                                                                     |          156 |            2 |       1 |      24 |     122 |</div><div>| 154981 | Snort Alert [129:12:1]                                                                                                                     |          155 |            2 |       1 |      12 |     129 |</div><div>| 154982 | Snort Alert [1:1917:15]                                                                                                                    |          175 |            3 |      15 |    1917 |       1 |</div><div>| 154983 | Snort Alert [1:24303:6]                                                                                                                    |          181 |            3 |       6 |   24303 |       1 |</div><div>| 154984 | Snort Alert [116:6:1]                                                                                                                      |          178 |            3 |       1 |       6 |     116 |</div><div>| 154985 | Snort Alert [129:15:1]                                                                                                                     |          155 |            2 |       1 |      15 |     129 |</div><div>| 154986 | Snort Alert [122:22:1]                                                                                                                     |          156 |            2 |       1 |      22 |     122 |</div><div>| 154987 | Snort Alert [122:21:1]                                                                                                                     |          156 |            2 |       1 |      21 |     122 |</div><div>| 154988 | Snort Alert [128:4:1]                                                                                                                      |          177 |            2 |       1 |       4 |     128 |</div><div>| 154989 | Snort Alert [116:445:1]                                                                                                                    |          155 |            2 |       1 |     445 |     116 |</div><div>| 154990 | Snort Alert [1:2329:14]                                                                                                                    |          161 |            1 |      14 |    2329 |       1 |</div><div>+--------+--------------------<wbr>------------------------------<wbr>------------------------------<wbr>------------------------------<wbr>------------------------------<wbr>+--------------+--------------<wbr>+---------+---------+---------<wbr>+</div></div><div><br></div></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>