Re: [Prelude Hybrid IDS] #143: prelude-manager overstepping varchar(255) field

#143: prelude-manager overstepping varchar(255) field
-----------------------------------------------------+----------------------
 Reporter:  [email protected]                   |        Owner:  yoann             
     Type:  defect                                   |       Status:  assigned          
 Priority:  normal                                   |    Milestone:  LibpreludeDB 0.9.8
Component:  libpreludedb                             |      Version:  0.9               
 Severity:  major                                    |   Resolution:                    
 Keywords:  varchar varying overstepping postgresql  |  
-----------------------------------------------------+----------------------
Changes (by yoann):

  * component:  prelude-manager => libpreludedb
  * milestone:  => LibpreludeDB 0.9.8
  * status:  new => assigned

Old description:

> Hi,
>
> I have been finding log messages like this since I installed prelude a
> month ago:
>
> prelude-manager: could not insert message into database: Query error:
> ERROR:  value too long for type character varying(255)
>
> I think the manager is trying to insert data that's the wrong size (and
> perhaps, since postgres is more strict than MySQL, I'm actually getting
> an error).  I can't tell if this is really prelude-manager's fault, but
> since the manager is the last step before database insertion, I am
> assuming that it should make sure that the input is formatted correctly.
>
> Here's some information on my setup:
>
> prelude-manager-0.9.1
> libpreludedb-0.9.2
> libprelude-0.9.3
> postgresql-8.1.3
> snort-2.4.3
> prelude-lml-0.9.1
>
> I have a few snort sensors attached to prelude as well as prelude-lml.  I
> started running prelude-manager with -D 9 to see if I can catch some more
> info next time this happens, but if anyone here has some ideas please let
> me know.

New description:

 Hi,

 I have been finding log messages like this since I installed prelude a
 month ago:

 {{{
 prelude-manager: could not insert message into database: Query error:
 ERROR:  value too long for type character varying(255)
 }}}

 I think the manager is trying to insert data that's the wrong size (and
 perhaps, since postgres is more strict than MySQL, I'm actually getting an
 error).  I can't tell if this is really prelude-manager's fault, but since
 the manager is the last step before database insertion, I am assuming that
 it should make sure that the input is formatted correctly.

 Here's some information on my setup:

 prelude-manager-0.9.1
 libpreludedb-0.9.2
 libprelude-0.9.3
 postgresql-8.1.3
 snort-2.4.3
 prelude-lml-0.9.1

 I have a few snort sensors attached to prelude as well as prelude-lml.  I
 started running prelude-manager with -D 9 to see if I can catch some more
 info next time this happens, but if anyone here has some ideas please let
 me know.

-- 
Ticket URL: <https://trac.prelude-ids.org/ticket/143>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite

_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel