[Snort-users] Where's Waldo?
wkitty42 at ...14940...
Wed Oct 10 14:55:42 EDT 2012
On 10/9/2012 01:54, AllowOverride wrote:
> WARNING: Ignoring corrupt/truncated waldofile '/tmp/waldo'
> i updated my barnyard2.conf, and im still getting this message.
> why is it corrupt?
> -rw-r--r-- 1 root root 0 Oct 8 17:42 waldo
the obvious answer is that it is zero bytes and thus has no data in it... if the
code is looking for data in a specific format, it won't find it in /that/ file
at this time... it is rightly emitting the warning message ;)
> i still think barnyard2.conf is not working right.
> someone said im not doing the research
> i followed the official howtos. go figure...
> suggestions now? thanks
More information about the Snort-users