[Snort-users] Fwd: Re: barnyard2-1.10 major problem

beenph beenph at ...11827...
Thu Oct 25 10:34:59 EDT 2012


On Thu, Oct 25, 2012 at 10:25 AM, Lawrence R. Hughes, Sr.
<lhughes at ...14822...> wrote:
> Beenph,
>
> Running the command line you suggested using that file, the results were one
> (1) event with the first packet from unified2 file.
> Barnyard2 did not insert the second packet of the same event into the
> snort.data table.
>

can you send me your barnyard2.conf without database login information?

And before running with --alert-on-each-packet-in-stream for testing ,
did you delete your waldo file?

-elz




More information about the Snort-users mailing list