<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Hi, <br><br>Yes, barnyard2 is also running. But maybe not the way it has to ?<br><br>Thx<br><br><div><div id="SkyDrivePlaceholder"></div>> Date: Tue, 3 Jan 2012 12:38:58 +0100<br>> From: victor@inliniac.net<br>> To: oisf-users@openinfosecfoundation.org<br>> Subject: Re: [Oisf-users] Suricata / Snorby Events errors<br>> <br>> On 01/03/2012 12:14 PM, Amrith Z wrote:<br>> > <br>> > Hi All,<br>> > <br>> > I'm running Suricata with Snorby. The problem I have has already happened to me several times, and might come from Snorby, and not Suricata. What is happening is that by running Suricata, I do not see any alerts in the Events list of Snorby anymore.<br>> > I see an alert in Snorby in the "Worker & Job Queue" section saying "Warning : the sensor cache job is not running". Nothing seems to change when I restart it with the interface. I found the /etc/init.d/worker script, but it doesn't work.<br>> > <br>> > Any ideas ?<br>> <br>> I assume you have barnyard2 running as well in this setup. Can you check<br>> if it is still running? Or restart it to see if that makes the events<br>> flow again?<br>> <br>> -- <br>> ---------------------------------------------<br>> Victor Julien<br>> http://www.inliniac.net/<br>> PGP: http://www.inliniac.net/victorjulien.asc<br>> ---------------------------------------------<br>> <br>> _______________________________________________<br>> Oisf-users mailing list<br>> Oisf-users@openinfosecfoundation.org<br>> http://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users<br></div> </div></body>
</html>