ACID and Barnyard problems

["Tony Bunce" <tonyb () go-concepts com>]

We were having snort directly log to mysql but everyone keeps talking
about the befits of barnyard so I decided to give it a try.  After
having some fun getting it installed with mysql 4 I got everything up
and running.  Now I am noticing some weird errors that I never had when
snort was logging directly to mysql.   Quite frequently in acid I'll get
an error message saying something like "Database Error: Duplicate Key
X-XXXX" also when I update our rules and restart snort barnyard will
often not log any data after snort was restarted.  We are running the
newest version of both snort and barnyard running barnyard in the
background with a waldo file.

 

Any ideas or tips that could help?

 

Thanks,

Tony B, CCNA, Network+

Systems Administration

GO Concepts, Inc. / www.go-concepts.com

Are you on the GO yet?

What about those you know, are they on the GO?

513.934.2800

1.888.ON.GO.YET