[Snort-users] Barnyard2 and dealing with mysql_error

beenph beenph at ...11827...
Sun Aug 7 14:28:24 EDT 2011


On Sun, Aug 7, 2011 at 7:52 AM, James Lay <jlay at ...13475...> wrote:
> Hey all,
> So yea…sometimes my connection goes wonky and drops.  Is there a way to get
> barnaryd2 to restart after something like this?  I was under the impression
> that one of the benefits of using barnyard2 instead of straight snort->db
> was to due away with surprises like this.  Currently I'm log monitoring and
> just stopping the process so I can manually start it later…hardly a
> solution, but at least I don't lose my data.  Anyone have a better solution
> to this?  Thanks.
> James

Greetings James,

is your database having some issue?

Where is your database located? On the same system on a remote system?

Is there any network quirks that woul tear down your session?

Are you using a SSL session?

Do you have some timeout values set in your my.conf (server side)?

One thing for sure, the actual database output plugin is also in the
process of getting
some facelift and handling of reconnect will be dealt with, but in the
meantime mabey tweaking
some server variables could help you with this. On a side note , this
wouldn't help if the cause
of the connection teardown is he network but in the meantime its the
best place to look
for a fix.

For the record we have now a barnyard2-user ML where you can also
report those issue.
http://groups.google.com/group/barnyard2-users
and
http://groups.google.com/group/barnyard2-devel

So come and join us there!

-elz










> ------------------------------------------------------------------------------
> BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
> The must-attend event for mobile developers. Connect with experts.
> Get tools for creating Super Apps. See the latest technologies.
> Sessions, hands-on labs, demos & much more. Register early & save!
> http://p.sf.net/sfu/rim-blackberry-1
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please see http://www.snort.org/docs for documentation
>




More information about the Snort-users mailing list