Snort mailing list archives

Re: Barnyard2 will not start


From: beenph <beenph () gmail com>
Date: Sat, 12 Feb 2011 15:53:23 -0500

What happens when you try to run barnyard in console rather than to
have it daemonized.

Send the output.

-elz


On Fri, Feb 11, 2011 at 11:40 PM, Atkins, Dwane P <ATKINSD () uthscsa edu> wrote:
I have reloaded a sensor with Ubuntu 10.0.4.1 LTS, Snort 2.9.0.3, and
Barnyard2 1.9  with mysql.



Snort seems to start just fine and the snort logs are growing but when I do
a ps –ef | grep snort, I do not see Barnyard2 starting.



Our rc.local reads:



ifconfig eth1 up

# Start the snort process

/usr/local/snort/bin/snort -D -u snort -g snort -c
/usr/local/snort/etc/snort.conf -i eth1

# Start the Barnyard2 process

/usr/local/bin/barnyard2 -c /usr/local/snort/etc/barnyard2.conf -G
/usr/local/snort/etc/gen-msg.map -S /usr/local/snort/etc/s

id-msg.map -d /var/log/snort -f snort.u2 -w /var/log/snort/barnyard2.waldo
-D

exit 0



I looked in dmesg and see the following issue:



33.845428] __ratelimit: 45 callbacks suppressed

[   33.845436] barnyard2[1426]: segfault at 1d ip 0071050b sp bfed4c6c error
4 in libc-2.11.1.so[6d0000+153000]



Any help would be appreciated



Dwane

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: