Snort mailing list archives
Re: Barnyard2 and dealing with mysql_error
From: firnsy <firnsy () securixlive com>
Date: Mon, 08 Aug 2011 20:36:06 +1000
G'day James, Just to clean up the discussion on this list. The mysql component of the database does have the option to automatically reconnect on a dropped connection. It's auto discovered at compile time and is checked using the mysql version number. If configured correctly and supported by your mysql server, config.h should yield: #define MYSQL_HAS_OPT_RECONNECT 1 What this is supposed to do is block the barnyard2 spooler until the connection has re-established and then continue. Thus you would not miss any events. If your config.h has this option and you are in fact missing alerts then that is a different story, a bug in fact and we'd be happy to here about it on our mailing list. Regards, - firnsy On 08/08/11 06:38, James Lay wrote:
Greetings James, is your database having some issue? Where is your database located? On the same system on a remote system? Is there any network quirks that woul tear down your session? Are you using a SSL session? Do you have some timeout values set in your my.conf (server side)?DB is peachy Oh it's remote (and on a certain PPPoE link you may be familiar with ;)) Just my ISP 8-|...sometimes my pppoe link bounces..not often, but often enough (twice a month?). Negative on SSL (I know...I know.. ;)) Haven't set the server variables yet in my.conf. I've seen some things after googling, but I'm hoping to get some recommendations here. Thank you. James P.S. Joining the barnyard2 groups today so I don't drive everyone in the snort groups crazy ;) ------------------------------------------------------------------------------ BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA The must-attend event for mobile developers. Connect with experts. Get tools for creating Super Apps. See the latest technologies. Sessions, hands-on labs, demos& much more. Register early& save! http://p.sf.net/sfu/rim-blackberry-1 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please see http://www.snort.org/docs for documentation
------------------------------------------------------------------------------ BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA The must-attend event for mobile developers. Connect with experts. Get tools for creating Super Apps. See the latest technologies. Sessions, hands-on labs, demos & much more. Register early & save! http://p.sf.net/sfu/rim-blackberry-1 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please see http://www.snort.org/docs for documentation
Current thread:
- Barnyard2 and dealing with mysql_error James Lay (Aug 07)
- Re: Barnyard2 and dealing with mysql_error Paul Schmehl (Aug 09)
- Re: Barnyard2 and dealing with mysql_error James Lay (Aug 09)
- Re: Barnyard2 and dealing with mysql_error Paul Schmehl (Aug 09)
- Re: Barnyard2 and dealing with mysql_error James Lay (Aug 09)
- Re: Barnyard2 and dealing with mysql_error beenph (Aug 09)
- Re: Barnyard2 and dealing with mysql_error James Lay (Aug 09)
- Re: Barnyard2 and dealing with mysql_error firnsy (Aug 09)
- Re: Barnyard2 and dealing with mysql_error James Lay (Aug 09)
- Re: Barnyard2 and dealing with mysql_error James Lay (Aug 09)
- Re: Barnyard2 and dealing with mysql_error Paul Schmehl (Aug 09)