[Snort-users] barnyard2 error with waldo file
jason.weir at ...14916...
Thu Apr 14 14:04:15 EDT 2011
Delete the waldo file - make sure whatever user snort is running as has
permissions to write to the folder and then restart barnyard2..
You will get the error "WARNING: Unable to open waldo file
'/var/log/snort/barnyard.waldo' (No such file or directory)"
Next time barnyard starts you should not get the error..
> -----Original Message-----
> From: Agus [mailto:agus.262 at ...11827...]
> Sent: Thursday, April 14, 2011 1:56 PM
> To: snort-users at lists.sourceforge.net
> Subject: [Snort-users] barnyard2 error with waldo file
> Hi guys,
> I am getting this error in my new sensor since yesterday and
> can't solve it.
> WARNING: Unable to open waldo file '/var/log/snort/barnyard.waldo' (No
> such file or directory)
> then i did
> cp /dev/null /var/log/snort/barnyard.waldo
> /usr/local/bin/barnyard2 -c /etc/snort/barnyard2.conf -d
> /var/log/snort -f snort.log -w /var/log/snort/barnyard.waldo
> and i get
> WARNING: Ignoring corrupt/truncated waldofile
> i tried touch, chown to snort.. but always same error... In my first
> sensor i dont remember having this issue.. same version barnyard2.1.9
> any hints?
Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
More information about the Snort-users