Snort mailing list archives

Re: Where's Waldo?


From: waldo kitty <wkitty42 () windstream net>
Date: Wed, 10 Oct 2012 14:55:42 -0400

On 10/9/2012 01:54, AllowOverride wrote:
WARNING: Ignoring corrupt/truncated waldofile '/tmp/waldo'

i updated my barnyard2.conf, and im still getting this message.

why is it corrupt?

-rw-r--r-- 1 root root 0 Oct 8 17:42 waldo

the obvious answer is that it is zero bytes and thus has no data in it... if the 
code is looking for data in a specific format, it won't find it in /that/ file 
at this time... it is rightly emitting the warning message ;)


i still think barnyard2.conf is not working right.
someone said im not doing the research
i followed the official howtos. go figure...


suggestions now? thanks

------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: