[Snort-users] barnyard beta 4

neal ntimm at ...1964...
Wed Nov 14 15:39:03 EST 2001


Can you send me the link to the cvs.

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Andrew R.
Baker
Sent: Wednesday, November 14, 2001 12:22 PM
To: ntimm at ...1692...
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] barnyard beta 4



The "Unable to find SID" messages appear when the Signature ID (loaded
from sid-msg.map) for an alert cannot be located.  I would suggest
updating to the CVS version of barnyard and making sure you are running
at least build 84 of snort.

-Andrew


> Neal Timm wrote:
> 
> receiving these error messages when trying to start
> Unable to find SID (1, 2)
> Unable to find SID (1, 2)
> Rotating file [read 2 records from 
> /var/log/snort/snort.alert.1004954881]
> Unable to find SID (1, 2)
> Unable to find SID (1, 2)
> Unable to find SID (2, 3)
> Unable to find SID (2, 3)
> Unable to find SID (0, 1004957390)
> Unable to find SID (0, 1004957390)
> Unable to find SID (119221, -210996264)
> 
> Then it seg faults
> Running redhat 7.2 snort version 1.8.2 build 86
> 
> Any help would be appreciated just trying to log it to syslog.

_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list