[Prelude Hybrid IDS] #143: prelude-manager overstepping varchar(255) field

Prelude Hybrid IDS <[email protected]>
Newsgroups gmane.comp.security.ids.prelude.devel
Message-ID <[email protected]>
#143: prelude-manager overstepping varchar(255) field
------------------------------------+---------------------------------------
 Reporter:  [email protected]  |       Owner:  yoann                                  
     Type:  defect                  |      Status:  new                                    
 Priority:  normal                  |   Milestone:                                         
Component:  prelude-manager         |     Version:  0.9                                    
 Severity:  major                   |    Keywords:  varchar varying overstepping postgresql
------------------------------------+---------------------------------------
 Hi,

 I have been finding log messages like this since I installed prelude a
 month ago:

 prelude-manager: could not insert message into database: Query error:
 ERROR:  value too long for type character varying(255)

 I think the manager is trying to insert data that's the wrong size (and
 perhaps, since postgres is more strict than MySQL, I'm actually getting an
 error).  I can't tell if this is really prelude-manager's fault, but since
 the manager is the last step before database insertion, I am assuming that
 it should make sure that the input is formatted correctly.

 Here's some information on my setup:

 prelude-manager-0.9.1
 libpreludedb-0.9.2
 libprelude-0.9.3
 postgresql-8.1.3
 snort-2.4.3
 prelude-lml-0.9.1

 I have a few snort sensors attached to prelude as well as prelude-lml.  I
 started running prelude-manager with -D 9 to see if I can catch some more
 info next time this happens, but if anyone here has some ideas please let
 me know.

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/143>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite

_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.