[Snort-users] Where's Waldo?

AllowOverride allowoverride at ...11827...
Wed Oct 10 17:46:29 EDT 2012


thanks waldo :) makes sense, i thought so as well since zero byte, but
the word corrupt through me

On Wed, 2012-10-10 at 14:55 -0400, waldo kitty wrote:
> On 10/9/2012 01:54, AllowOverride wrote:
> > WARNING: Ignoring corrupt/truncated waldofile '/tmp/waldo'
> >
> > i updated my barnyard2.conf, and im still getting this message.
> >
> > why is it corrupt?
> >
> > -rw-r--r-- 1 root root 0 Oct 8 17:42 waldo
> 
> the obvious answer is that it is zero bytes and thus has no data in it... if the 
> code is looking for data in a specific format, it won't find it in /that/ file 
> at this time... it is rightly emitting the warning message ;)
> 
> >
> > i still think barnyard2.conf is not working right.
> > someone said im not doing the research
> > i followed the official howtos. go figure...
> >
> >
> > suggestions now? thanks
> 
> ------------------------------------------------------------------------------
> Don't let slow site performance ruin your business. Deploy New Relic APM
> Deploy New Relic app performance management and know exactly
> what is happening inside your Ruby, Python, PHP, Java, and .NET app
> Try New Relic at no cost today and get our sweet Data Nerd shirt too!
> http://p.sf.net/sfu/newrelic-dev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!





More information about the Snort-users mailing list