[Snort-users] Barnyard2 - Phantom cid/sid?

Eoin Miller eoin.miller at ...14586...
Thu Jan 24 11:38:52 EST 2013


On 1/24/2013 16:33, beenph wrote:
> CID value comes from the sensor table.
> 
> -elz

That I get, but there are NO entries in the table, at all. I dropped the
DB, recreated and only one of the sensors complains about this. It is
really weird. I am looking for some type of client caching with mysql
libs, or anything, but can't find where it is getting this from.

-- Eoin




More information about the Snort-users mailing list