No Sensors Showing in Snorby

["Matt M." <mr10001 () gmail com>]

Afternoon,

I've been able to get Snort, Barnyard2, Pulled Pork, and Snorby "working".
 However, I'm not seeing any sensors populate in Snorby.

My *Snort Config* has:
output unified2: filename snort.log, limit 128, nostamp, mpls_event_types,
vlan_event_types

*Barnyard2.conf* has:
output database: log, mysql, dbname=snort user=snorby password=PASSWORD
host=localhost

I can see that snort is running and creating a snort.log file.

I'm trying to get this running on OSX.

I did have issues in snorby where it said the worker wasn't running, so I
modified the worker.rb file:

At line 49 in lib/snorby/worker.rb, replace with…
        Snorby::Process.new(`ps awux | fgrep 'delayed_job' | head -n
1`.chomp.strip)

I then manually start the worker in snorby and it appears to start, as the
message goes away.

I do not appear to have any errors when running Snort, Barnyard2, or
Snorby.  I launch them with the following...

*snort:* sudo snort -c /etc/snort/snort.conf -l /var/log/snort/
*barnyard2*: /usr/local/bin/barnyard2 -c /usr/local/etc/barnyard2.conf -d
/private/var/log/snort -f snort.log
*snorby*: bundle exec rails server -e production

Thanks for any help with this,

PS- The only thing I could think of is if this may be related to waldo
files?
-- 
M., CISSP, GCFE, GCFA

*“*To disagree leads to study, to study leads to understanding, to
understand is to appreciate, to appreciate is to love. So maybe I’ll end up
loving your theory.*”* -*John Wheeler*

------------------------------------------------------------------------------
Want excitement?
Manually upgrade your production database.
When you want reliability, choose Perforce
Perforce version control. Predictably reliable.
http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!