CSV output plugins for barnyard2 and snort

[Sean Cruikshank <sean.cruikshank () outlook com>]

Hi guys,


I've been playing around with the csv output plugins for both barnyard and snort for a data viz app im developing.


I've come across a couple of major issues. With Barnyard2 the following happens,


Im using the configuration: output alert_csv: /var/log/snort/csv.out 
msg,priority,timestamp,protoname,srcip,sport,dstip,dport,classname,class

However the fields priority, sport, dport, classname and class are empty.


With Snort fields such as priority, class and classname arent even present.


I despertely need these values for the application im making.


If anyone has any idea how to get around this please let me know.


Cheers,


Sean Cruikshank


P.S.


Im developing the application using Python and use the mysql database with barnyard2,


so if there is a way of retrieving the neccessary data from the mysql database with Python I could also achieve this.

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!