[Snort-users] Barnyard woes

David dwad24 at ...722...
Wed May 26 06:28:10 EDT 2004


Thanks to everybody for their responses!  I Really appreciate the help as always!  I went ahead and fixed my sid-msg.map file on my acid server, so I'll see within the next few days if it the fix worked.

Thanks again everyone!


 --- On Tue 05/25, Bamm Visscher < bamm at ...539... > wrote:

From: Bamm Visscher [mailto: bamm at ...539...]

To: dwad24 at ...722...

     Cc: snort-users at lists.sourceforge.net

Date: Tue, 25 May 2004 09:48:16 -0500

Subject: Re: [Snort-users] Barnyard woes

You need to make sure your sid-msg.map is updated.<br><br>Bammkkkk<br><br>On Tue, May 25, 2004 at 08:54:23AM -0400, David wrote:<br>> hey everybody,I was hoping somone could provide me with some insight... :)I have barnyard-0.1.0 installed and for some reason it inputs some alerts into my DB with the sig_name as "Snort Alert [1:2416:0]" where the 2416 is the sig_id.  It only seems to do this for a small handful of the sigs, a lot of which are ones I have written myself.  Has anyone seen this problem?  Is this issue fixed in 0.2.0?  I am trying to get this to work without upgrading if possible...TIA everyone,Dave<br><br><br>-------------------------------------------------------<br>This SF.Net email is sponsored by: Oracle 10g<br>Get certified on the hottest thing ever to hit the market... Oracle 10g. <br>Take an Oracle 10g class now, and we'll give you the exam FREE.<br>http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click<br>_______________________________________________<br>Snort-users mailing list<br>Snort-users at lists.sourceforge.net<br>Go to this URL to change user options or unsubscribe:<br>https://lists.sourceforge.net/lists/listinfo/snort-users<br>Snort-users list archive:<br>http://www.geocrawler.com/redir-sf.php3?list=snort-users<br>

Join Excite! - http://www.excite.com
The most personalized portal on the Web!

More information about the Snort-users mailing list