Re: [Snort-devel] Offering a 64bit version of Snort for Windows?

[beenph]

On Wed, Oct 31, 2012 at 12:03 PM, Michael Steele <mich...@winsnort.com> wrote:
> I was wondering if it would be possible to add a 64bit version of Snort for
> Windows to the download section? I’ve tried add the 32bit version of Snort
> to a 64bit install but Barnyard2 is displaying a lot of odd items from the
> logs.

Michael, what do you mean by "a lot of odd items from the log"?

-elz

[beenph]

On Wed, Oct 31, 2012 at 8:02 PM, Michael Steele <mich...@winsnort.com> wrote:
> I'm seeing these:
>
> WARNING database [Database()]: Called with Event[0x0] Event Type [0]
> (P)acket [0x20cebe98]
>
> WARNING database [Database()]: Called with Event[0x0] Event Type [0]
> (P)acket [0x2096dd70]
>
> WARNING database [Database()]: Called with Event[0x0] Event Type [0]
> (P)acket [0x2080cc38]
>
> WARNING database [Database()]: Called with Event[0x0] Event Type [0]
> (P)acket [0x20649a18]
>
> WARNING database [Database()]: Called with Event[0x0] Event Type [0]
> (P)acket [0x205cd800]
>
> WARNING database [Database()]: Called with Event[0x0] Event Type [0]
> (P)acket [0x2057fba0]
>
> WARNING database [Database()]: Called with Event[0x0] Event Type [0]
> (P)acket [0x204fa5b8]
>
> WARNING database [Database()]: Called with Event[0x0] Event Type [0]
> (P)acket [0x20fa8690]
>
> WARNING database [Database()]: Called with Event[0x0] Event Type [0]
> (P)acket [0x20cebe98]
>
> WARNING database [Database()]: Called with Event[0x0] Event Type [0]
> (P)acket [0x2096dd70]
>


Thats because you probably have output log_unified2 configured in
snort rather than output unified2.

-elz