[Snort-users] Barnyard questions

Jason Lewis jlewis at ...2449...
Thu Nov 15 15:43:01 EST 2001

Previously I wasn't using the waldo file.  I decided to try it out and after
I HUP'ed snort, I could see the waldo file had the new spool files in it.

So my issues with losing the connection to the db may be related to
something else.

Does barnyard keep a connection to the db only when inserting data or is it
always connected?  At least what is the target behavior?

Jason Lewis
It's not secure "Because they told me it was secure".
The people at the other end of the link know less
about security than you do. And that's scary.

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Andrew R.
Sent: Wednesday, November 14, 2001 1:25 PM
To: jlewis at ...2449...
Cc: Snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Barnyard questions

Jason Lewis wrote:
> If I HUP snort, do I need to restart barnyard?
> I am seeing inconsistent behavior, snort continues to log to the spool
> but barnyard doesn't seem to be reading from them. Barnyard continues to
> run, but there are no connections to the database.  If I kill barnyard and
> start it back up, everything is ok.
> I thought maybe it was related to HUP'ing snort....

HUP'ing Snort should not cause barnyard any problems.  However, it is
easily possible that there are bugs that would cause this to happen.
Hopefully I can get some time to correct all of the current issues with
barnyard this weekend and create a new beta release.


Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list