I've got barnyard2 logging for snort and after running a vulnerability scan barnyard2 stopped working and I could not get it to start again until I noticed the following syslog entry:
barnyard2[869]: --== Initialization Complete ==--
barnyard2[869]: Barnyard2 initialization completed successfully (pid=869)
barnyard2[869]: Using waldo file '/var/log/snort/barnyard2.waldo':#012 spool directory = /var/log/snort#012 spool filebase = snort.u2#012 time_stamp = 1487984973#012 record_idx = 60623
barnyard2[869]: Opened spool file '/var/log/snort/snort.u2.1487984973'
barnyard2[869]: FATAL ERROR: database mysql_error: Data too long for column 'data_payload' at row 1#012#011SQL=[INSERT INTO data (sid,cid,data_payload) VALUES (1,43750,'5858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585
barnyard2[869]: Barnyard2 exiting
barnyard2[869]: database: Closing connection to database "snort"
barnyard2[869]: ===============================================================================
I changed the data_payload column from type text to type mediumtext and that solved the issue.
I've got barnyard2 logging for snort and after running a vulnerability scan barnyard2 stopped working and I could not get it to start again until I noticed the following syslog entry:
barnyard2[869]: --== Initialization Complete ==-- barnyard2[869]: Barnyard2 initialization completed successfully (pid=869) barnyard2[869]: Using waldo file '/var/log/snort/barnyard2.waldo':#012 spool directory = /var/log/snort#012 spool filebase = snort.u2#012 time_stamp = 1487984973#012 record_idx = 60623 barnyard2[869]: Opened spool file '/var/log/snort/snort.u2.1487984973' barnyard2[869]: FATAL ERROR: database mysql_error: Data too long for column 'data_payload' at row 1#012#011SQL=[INSERT INTO data (sid,cid,data_payload) VALUES (1,43750,'5858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585 barnyard2[869]: Barnyard2 exiting barnyard2[869]: database: Closing connection to database "snort" barnyard2[869]: ===============================================================================
I changed the data_payload column from type text to type mediumtext and that solved the issue.