performance/malfunction issues

Hello mates,

I am having some trouble related to performance using prelude +
snort-prelude + openbsd4.7.
Snort is catching events in real time ( i can with alert.log ), so far
so good, the problem is that snort does not flush in real time events to
prelude. It seems like a random problem, sometimes it works just fine
the events flow and i can see them in the prelude database almost in
realtime, other times there is no communication between snort and
prelude, and yes am i am generating traffic to trigger the rules. I can
see that communication by sniff the connection between the two
components in lo0face.

I googled it and found some guy with the exact same problem, but no
answers at all.

I think it might be a problem with the prelude export plugin implemented
in snort.


Software versions (all installed with openbsd ports):

prelude-libprelude-0.9.24.1
prelude-libpreludedb-0.9.15.3
prelude-manager-0.9.15
prelude-prewikka-0.9.17
snort-2.8.4.1-prelude

p.s. - I already compiled the newest version of snort and still have the
same problem.
p.s.2 - This is the major problem, there is another problem with the
heartbeat, snort does not appear online in prewikka.

I hope the community can help me.

Best Regards.

Sérgio
_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user