[Snort-users] Barnyard2 database failures

Dave Corsello snort-users at ...15598...
Sun Dec 30 11:43:31 EST 2012


Hi elz,

Thanks for your reply.  On each sensor, barnyard2 is configured with a 
unique hostname, so that there are two sensors in the sensor table, and 
there's only one instance of Barnyard2 running on each sensor.

--Dave

On 12/29/2012 8:54 PM, beenph wrote:
> Hi dave,
> In both of your barnyard2 configuration do you use
> different information so that you have two sensor
> in your sensor table?
> Because if you use the same information, then it would
> be seen as 1 sensor and you could hit a race condition
> which could lead to this.
> So i would make sure that you both barnyard2 instances have different 
> information,
> and also make sure that you do not have an other barnayrd2 process in 
> the backgroud .
> Mabey launched by a startup script etc.
> This error would only happen if the transaction fail (duplicate key) 
> or if your database die,
> i suspect you have an other process also inserting and this is why 
> your hitting this condition.
> -elz
>





More information about the Snort-users mailing list