[Snort-users] Barnyard questions

Jason Lewis jlewis at ...2449...
Thu Nov 15 15:43:01 EST 2001


Previously I wasn't using the waldo file.  I decided to try it out and after
I HUP'ed snort, I could see the waldo file had the new spool files in it.

So my issues with losing the connection to the db may be related to
something else.

Does barnyard keep a connection to the db only when inserting data or is it
always connected?  At least what is the target behavior?

Jason Lewis
http://www.packetnexus.com
It's not secure "Because they told me it was secure".
The people at the other end of the link know less
about security than you do. And that's scary.




-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Andrew R.
Baker
Sent: Wednesday, November 14, 2001 1:25 PM
To: jlewis at ...2449...
Cc: Snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Barnyard questions


Jason Lewis wrote:
>
> If I HUP snort, do I need to restart barnyard?
>
> I am seeing inconsistent behavior, snort continues to log to the spool
file,
> but barnyard doesn't seem to be reading from them. Barnyard continues to
> run, but there are no connections to the database.  If I kill barnyard and
> start it back up, everything is ok.
>
> I thought maybe it was related to HUP'ing snort....

HUP'ing Snort should not cause barnyard any problems.  However, it is
easily possible that there are bugs that would cause this to happen.
Hopefully I can get some time to correct all of the current issues with
barnyard this weekend and create a new beta release.

-Andrew

_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list