Re: [Sguil-devel] sancp_agent.tcl Error: can't read "tmpFileNames": no such variable

[edward <ed...@li...>]

Bamm Visscher wrote:
> Try this version. See if it starts creating FAILED-foo files.

This is your lucky day!

I managed to test it today:

Error: couldn't open
"/snort_data/equador/sancp/today/stats.peth0.1208261447": no such file
or directory
couldn't open "/snort_data/equador/sancp/today/stats.peth0.1208261447":
no such file or directory
    while executing
"open $fileName r"
    (procedure "ParseSsnSancpFiles" line 5)
    invoked from within
"ParseSsnSancpFiles $fileName"
    (procedure "CheckForSancpFiles" line 28)
    invoked from within
"CheckForSancpFiles"
    ("after" script)

Tested three times, same error... different stats.peth0.* file....
Runnes for ~10 seconds.... ; then error...

Regards,
Edward


>
> Bammkkkk
>
> On Sun, Apr 13, 2008 at 12:47 AM, Edward Fjellskål <ed...@li...>
wrote:
>
> Bamm Visscher wrote:
>  > Any chance you inadvertently have two sancp_agents running?
>
>  Nope... Just one...
>
>  What I did, was to just not run sancp_agent for a while, to build up
>  lots of data. Then I started it, to see how things are when sancp_agent
>  has lots of work to do...
>
>  It runs ok for about 3-8 minutes, then dies.
>
>  Im on ubuntu gutsy.
>
>
>  Edward
>
>  >>
>  -------------------------------------------------------------------------
>  This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
>  Don't miss this year's exciting event. There's still time to save $100.
>  Use priority code J8TL2D2.
>  http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
>  _______________________________________________
>  Sguil-devel mailing list
>  Sgu...@li...
>  https://lists.sourceforge.net/lists/listinfo/sguil-devel
> >>
>
>