{"action":"created","issue":{"url":"https://api.github.com/repos/firnsy/barnyard2/issues/144","labels_url":"https://api.github.com/repos/firnsy/barnyard2/issues/144/labels{/name}","comments_url":"https://api.github.com/repos/firnsy/barnyard2/issues/144/comments","events_url":"https://api.github.com/repos/firnsy/barnyard2/issues/144/events","html_url":"https://github.com/firnsy/barnyard2/issues/144","id":69800925,"number":144,"title":"OpSyslog_Log(): Is currently unable to handle Event Type [72]","user":{"login":"dkasak","id":463342,"avatar_url":"https://avatars.githubusercontent.com/u/463342?v=3","gravatar_id":"","url":"https://api.github.com/users/dkasak","html_url":"https://github.com/dkasak","followers_url":"https://api.github.com/users/dkasak/followers","following_url":"https://api.github.com/users/dkasak/following{/other_user}","gists_url":"https://api.github.com/users/dkasak/gists{/gist_id}","starred_url":"https://api.github.com/users/dkasak/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dkasak/subscriptions","organizations_url":"https://api.github.com/users/dkasak/orgs","repos_url":"https://api.github.com/users/dkasak/repos","events_url":"https://api.github.com/users/dkasak/events{/privacy}","received_events_url":"https://api.github.com/users/dkasak/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-04-21T10:01:26Z","updated_at":"2015-05-02T20:19:23Z","closed_at":null,"body":"I've encountered the following log output several times now in my snort/barnyard2 installation:\r\n\r\n    Apr 21 10:37:05 termina snort[26499]: OpSyslog_Log(): Is currently unable to handle Event Type [72]\r\n    Apr 21 10:37:05 termina snort[26499]: FATAL ERROR: [Syslog_FormatIPHeaderLog()], strlcpy() error , bailing\r\n    Apr 21 10:37:05 termina snort[26499]: Barnyard2 exiting\r\n\r\nDeleting the `merged.log.*` file (as suggested somewhere) helps temporarily, but it happens again after a while and then barnyard2 won't start until the file is deleted again. I've seen the `unable to handle Event Type [72]` in one or two threads across the Internet in the context of barnyard2 not having ipv6 support, but from what I've gathered, this is no longer the case.\r\n\r\nWhat does this error message mean? What can I do to fix it?\r\n\r\nThe system in question is FreeBSD 10.1-RELEASE-p9 and the barnyard2 version string is `Version 2.1.13 (Build 327) IPv6`.\r\n"},"comment":{"url":"https://api.github.com/repos/firnsy/barnyard2/issues/comments/98395424","html_url":"https://github.com/firnsy/barnyard2/issues/144#issuecomment-98395424","issue_url":"https://api.github.com/repos/firnsy/barnyard2/issues/144","id":98395424,"user":{"login":"binf","id":833416,"avatar_url":"https://avatars.githubusercontent.com/u/833416?v=3","gravatar_id":"","url":"https://api.github.com/users/binf","html_url":"https://github.com/binf","followers_url":"https://api.github.com/users/binf/followers","following_url":"https://api.github.com/users/binf/following{/other_user}","gists_url":"https://api.github.com/users/binf/gists{/gist_id}","starred_url":"https://api.github.com/users/binf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/binf/subscriptions","organizations_url":"https://api.github.com/users/binf/orgs","repos_url":"https://api.github.com/users/binf/repos","events_url":"https://api.github.com/users/binf/events{/privacy}","received_events_url":"https://api.github.com/users/binf/received_events","type":"User","site_admin":false},"created_at":"2015-05-02T20:19:23Z","updated_at":"2015-05-02T20:19:23Z","body":"//----------LEGACY, type '72'\ntypedef struct Unified2IDSEventIPv6_legacy\nEvents will be parsed but not outputed.\nWill have to check where it bails on v6 since before it wouldn't get sent\nto the output plugin.\n\n\nOn Tue, Apr 21, 2015 at 6:01 AM, Denis <notifications@github.com> wrote:\n\n> I've encountered the following log output several times now in my\n> snort/barnyard2 installation:\n>\n> Apr 21 10:37:05 termina snort[26499]: OpSyslog_Log(): Is currently unable to handle Event Type [72]\n> Apr 21 10:37:05 termina snort[26499]: FATAL ERROR: [Syslog_FormatIPHeaderLog()], strlcpy() error , bailing\n> Apr 21 10:37:05 termina snort[26499]: Barnyard2 exiting\n>\n> Deleting the merged.log.* file (as suggested somewhere) helps\n> temporarily, but it happens again after a while and then barnyard2 won't\n> start until the file is deleted again. I've seen the \"unable to handle\n> Event Type [72]\" in one or two threads across the Internet in the context\n> of barnyard2 not having ipv6 support, but from what I've gathered, this is\n> no longer the case.\n>\n> What does this error message mean? What can I do to fix it?\n>\n> The system in question is FreeBSD 10.1-RELEASE-p9 and the barnyard2\n> version string is Version 2.1.13 (Build 327) IPv6.\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/firnsy/barnyard2/issues/144>.\n>\n"}}