Snort mailing list archives
Having problem with Barnyard
From: Nick Moore <nmoore () sourcefire com>
Date: Wed, 23 Jun 2010 17:32:10 -0500
All,
I'm having a problem with Barnyard putting data into MySQL. Snort is seeing
events and the log file is increasing, but no events have yet been written
to the database.
I've attached my snort.conf and barnyard2.conf. Based on the Snort screen
output below, I'm sure events are triggering:
===============================================================================
Action Stats:
ALERTS: 246
LOGGED: 246
PASSED: 0
=====================
I'm sure I'm overlooking something simple. If anyone can point me in the
right direction, it would be much appreciated.
Thanks!
--
Nick Moore, SFCE, CISSP, CISA
Sr. Systems Engineer
Voice 708-336-9041
Email nick.moore () sourcefire com
IM nickgmoore (Yahoo)
nickgmoore38 (AIM)
,,_
o" )~ Sourcefire - The Creators of Snort
''''
www.sourcefire.com www.snort.org
Attachment:
barnyard2.conf
Description:
Attachment:
snort.conf
Description:
------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Having problem with Barnyard Nick Moore (Jun 23)
- Re: Having problem with Barnyard JJC (Jun 23)
- Re: Having problem with Barnyard Nick Moore (Jun 23)
- Re: Having problem with Barnyard JJC (Jun 23)
- Re: Having problem with Barnyard Nick Moore (Jun 23)
- Re: Having problem with Barnyard firnsy (Jun 24)
- Message not available
- Re: Having problem with Barnyard firnsy (Jun 24)
- Re: Having problem with Barnyard Nick Moore (Jun 23)
- Re: Having problem with Barnyard JJC (Jun 23)
