trick17 n00b
Joined: 26 Mar 2004 Posts: 5
|
Posted: Sat Feb 26, 2005 1:17 pm Post subject: problem with snort/barnyard |
|
|
Hi everyone..
I have a little problem with barnyard: Barnyard should put my snort unified output to the mysql database.
This works if I run the following command:
barnyard -g /etc/snort/gen-msg.map -s /etc/snort/sid-msg.map -w /var/log/snort/waldo
but...
if I try to run barnyard with the init.d script (emerge placed it there), it doesn't work
if I look into /var/log/messages, i see the following
--schnipp---
Feb 26 13:52:10 kenny barnyard[26791]: Initializing daemon mode
Feb 26 13:52:10 kenny barnyard[26792]: Waiting for new spool file
---schnapp---
Here is my barnyard.conf file
--schnipp---
config hostname: snorthost
config interface: fxp0
config filter: not port 22
output alert_acid_db: mysql, sensor_id 1, database snort, server localhost, user root
---schnapp----
I also tried to put the command line parameters into the BARNYARD_OPTS variable, but that didn't work
can anyone help me ???
thanks trick17 |
|