[Snort-users] Barnyard2 reports database insert errors

waldo kitty wkitty42 at ...14940...
Sat Nov 2 15:20:03 EDT 2013


On 11/1/2013 11:11 PM, Dave Corsello wrote:
[...]
> +-------------------+--------+
> | table_name        | engine |
> +-------------------+--------+
> | acid_ag           | MyISAM |
> | acid_ag_alert     | MyISAM |
> | acid_event        | MyISAM |
> | acid_ip_cache     | MyISAM |
> | agent_asset_names | InnoDB |
> | aggregated_events | NULL   |
> | asset_names       | InnoDB |
> | base_roles        | MyISAM |
> | base_users        | MyISAM |
> | caches            | InnoDB |
> | classifications   | InnoDB |
> | daily_caches      | InnoDB |
> | data              | InnoDB |
> | delayed_jobs      | InnoDB |
> | detail            | InnoDB |
> | encoding          | InnoDB |
> | event             | InnoDB |
> | events_with_join  | NULL   |
> | favorites         | InnoDB |
> | icmphdr           | InnoDB |
> | iphdr             | InnoDB |
> | lookups           | InnoDB |
> | notes             | InnoDB |
> | notifications     | InnoDB |
> | opt               | InnoDB |
> | reference         | InnoDB |
> | reference_system  | InnoDB |
> | schema            | InnoDB |
> | search            | InnoDB |
> | sensor            | InnoDB |
> | settings          | InnoDB |
> | severities        | InnoDB |
> | sig_class         | InnoDB |
> | sig_reference     | InnoDB |
> | signature         | InnoDB |
> | tcphdr            | InnoDB |
> | udphdr            | InnoDB |
> | users             | InnoDB |
> +-------------------+--------+

not that this will have anything to do with your problem, but... have you also 
tuned your mysql installation for innodb usage? one of the web apps we use 
insisted on using innodb instead of myisam and it ran like fecal material until 
we tuned the innodb settings... it may be that if the database is having to 
extend the innodb files, that it may take time or more ram than configured for 
which might cause comms problems... possibly? maybe? just a thought i figured 
i'd toss out there ;)

-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.




More information about the Snort-users mailing list