I'm working on a project using Snort and BASE and I finally made it work. The problem is that BASE doesn't show the new alerts. The Time Window gets stuck till the moment I initiliaze Snort and Barnyard and it doesn't get refreshed. I checked $event_cache_auto_update and it is to 1, so I don't know why it doesn't update the new alerts. I checked if there were new alerts and there are, so it must be problem with BASE.
Did anyone have the same problem? Do you know what can be happening?
there are different possibilities why it does not refresh:
Is your browser unable to refresh?
Does any proxy intercept it (privoxy or the like)?
Or is the webserver blocking such a request?
You said, till the moment you initialized Snort and Barnyard - does this mean, it does refresh from that very moment on? So that the refresh mechanism is not totally disabled in any case, but only in some special cases?
Log in to post a comment.