sudo barnyard2 -c /etc/snort/barnyard2.conf -d /var/log/snort -f snort.u2 -w /var/log/snort/barnyard2.waldo -g snort -u snort -D ----------------------------------------------------------------------------------------------------------------------------------- Apr 7 16:59:45 at-desktop barnyard2[2499]: Running in Continuous mode Apr 7 16:59:45 at-desktop barnyard2[2499]: Apr 7 16:59:45 at-desktop barnyard2[2499]: --== Initializing Barnyard2 ==-- Apr 7 16:59:45 at-desktop barnyard2[2499]: Initializing Input Plugins! Apr 7 16:59:45 at-desktop barnyard2[2499]: Initializing Output Plugins! Apr 7 16:59:45 at-desktop barnyard2[2499]: Parsing config file "/etc/snort/barnyard2.conf" Apr 7 16:59:45 at-desktop barnyard2[2499]: #012#012+[ Signature Suppress list ]+#012---------------------------- Apr 7 16:59:45 at-desktop barnyard2[2499]: +[No entry in Signature Suppress List]+ Apr 7 16:59:45 at-desktop barnyard2[2499]: ----------------------------#012+[ Signature Suppress list ]+#012 Apr 7 16:59:45 at-desktop barnyard2[2499]: Barnyard2 spooler: Event cache size set to [2048] Apr 7 16:59:45 at-desktop barnyard2[2499]: Log directory = /var/log/barnyard2 Apr 7 16:59:45 at-desktop barnyard2[2499]: INFO database: Defaulting Reconnect/Transaction Error limit to 10 Apr 7 16:59:45 at-desktop barnyard2[2499]: INFO database: Defaulting Reconnect sleep time to 5 second Apr 7 16:59:45 at-desktop barnyard2[2499]: Initializing daemon mode Apr 7 16:59:45 at-desktop barnyard2[2500]: Daemon initialized, signaled parent pid: 2499 Apr 7 16:59:45 at-desktop barnyard2[2500]: PID path stat checked out ok, PID path set to /var/run/ Apr 7 16:59:45 at-desktop barnyard2[2499]: Daemon parent exiting Apr 7 16:59:45 at-desktop barnyard2[2500]: Writing PID "2500" to file "/var/run//barnyard2_NULL.pid" Apr 7 16:59:45 at-desktop barnyard2[2500]: #012[CacheSynchronize()],INFO: No system was found in cache (from signature map file), will not process or synchronize informations found in the database #012 Apr 7 16:59:45 at-desktop barnyard2[2500]: database: compiled support for (mysql) Apr 7 16:59:45 at-desktop barnyard2[2500]: database: configured to use mysql Apr 7 16:59:45 at-desktop barnyard2[2500]: database: schema version = 107 Apr 7 16:59:45 at-desktop barnyard2[2500]: database: host = localhost Apr 7 16:59:45 at-desktop barnyard2[2500]: database: user = snort Apr 7 16:59:45 at-desktop barnyard2[2500]: database: database name = snort Apr 7 16:59:45 at-desktop barnyard2[2500]: database: sensor name = at-desktop:NULL Apr 7 16:59:45 at-desktop barnyard2[2500]: database: sensor id = 1 Apr 7 16:59:45 at-desktop barnyard2[2500]: database: sensor cid = 1 Apr 7 16:59:45 at-desktop barnyard2[2500]: database: data encoding = hex Apr 7 16:59:45 at-desktop barnyard2[2500]: database: detail level = full Apr 7 16:59:45 at-desktop barnyard2[2500]: database: ignore_bpf = no Apr 7 16:59:45 at-desktop barnyard2[2500]: database: using the "log" facility Apr 7 16:59:45 at-desktop barnyard2[2500]: Apr 7 16:59:45 at-desktop barnyard2[2500]: --== Initialization Complete ==-- Apr 7 16:59:45 at-desktop barnyard2[2500]: Barnyard2 initialization completed successfully (pid=2500) Apr 7 16:59:45 at-desktop barnyard2[2500]: WARNING: Ignoring corrupt/truncated waldofile '/var/log/snort/barnyard2.waldo' Apr 7 16:59:45 at-desktop barnyard2[2500]: Waiting for new spool file Apr 7 17:02:35 at-desktop anacron[941]: Job `cron.daily' started Apr 7 17:02:35 at-desktop anacron[2528]: Updated timestamp for job `cron.daily' to 2016-04-07