[Snort-users] Barnyard2 - Phantom cid/sid?

beenph beenph at ...11827...
Thu Jan 24 11:47:14 EST 2013


On Thu, Jan 24, 2013 at 11:38 AM, Eoin Miller
<eoin.miller at ...14586...> wrote:
> On 1/24/2013 16:33, beenph wrote:
>> CID value comes from the sensor table.
>>
>> -elz
>
> That I get, but there are NO entries in the table, at all. I dropped the
> DB, recreated and only one of the sensors complains about this. It is
> really weird. I am looking for some type of client caching with mysql
> libs, or anything, but can't find where it is getting this from.
>

There's no caching in 2-1.9.
Are you sure your pointing to the good database server?




More information about the Snort-users mailing list