[Snort-users] Where's Waldo?

waldo kitty wkitty42 at ...14940...
Wed Oct 10 14:55:42 EDT 2012

On 10/9/2012 01:54, AllowOverride wrote:
> WARNING: Ignoring corrupt/truncated waldofile '/tmp/waldo'
> i updated my barnyard2.conf, and im still getting this message.
> why is it corrupt?
> -rw-r--r-- 1 root root 0 Oct 8 17:42 waldo

the obvious answer is that it is zero bytes and thus has no data in it... if the 
code is looking for data in a specific format, it won't find it in /that/ file 
at this time... it is rightly emitting the warning message ;)

> i still think barnyard2.conf is not working right.
> someone said im not doing the research
> i followed the official howtos. go figure...
> suggestions now? thanks

More information about the Snort-users mailing list