barnyard not reading log files

[Rajesh G S <rajeshgs () tevatel com>]

Hi all,

        I am trying to run snort as ids, i can see log files each time
being created when i testing snort but barnyard2 reads only the very first
time created log file.It skips the other alert cache.


[root@snort ~]# ll /var/log/snort/
total 36
-rw-r--r-- 1 snort snort 2056 Nov  5 17:46 barnyard2.waldo
-rw------- 1 snort snort  366 Nov  5 17:45 snort.log.1446725727
-rw------- 1 snort snort  384 Nov  5 17:47 snort.log.1446725842
-rw------- 1 snort snort  822 Nov  5 18:00 snort.log.1446726642
-rw------- 1 snort snort  936 Nov  5 20:06 snort.log.1446734162
-rw------- 1 snort snort  822 Nov  5 20:07 snort.log.1446734225
-rw------- 1 snort snort  708 Nov  5 20:07 snort.log.1446734260
-rw------- 1 snort snort 1050 Nov  5 20:32 snort.log.1446735742
-rw------- 1 snort snort 1940 Nov  5 17:42 snort.u2.1446725542

every time testing the snort it can able to show alerts but there is no
rise in the size of count.the count keep on show me as 10.

[root@snort ~]# mysql -u snort -p -D snort -e "select count(*) from
event"Enter password:
+----------+
| count(*) |
+----------+
|       10 |
+----------+

i think that there is no entry been made on to the mysql database,i am not
sure and i have no clue about it.so does anyone can help me?


thanks,
with regards.

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!