Starting Barnyard w/SQL out and no SQL server?

["Gordon Cunningham" <gacunningham () bellsouth net>]

I've got a distributed snort environment and am using barnyard with the
MySQL output on the sniffers (for ACID, etc.).  However, I've found that
starting barnyard when the remote MySQL server is unreachable or down causes
barnyard to die.  Short of setting up a local MySQL database and doing some
db replication, is there a way to make barnyard run on startup and
periodically try to reconnect to the database or otherwise be a bit more
forgiving?  Details on request.


- Gordon

"When I finally found a spam filter that worked, I no longer received ANY
email."

 -----Original Message-----
From:   snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]  On Behalf Of Andy Cuff
[talisker]
Sent:   Tuesday, September 09, 2003 3:28 PM
To:     Falvo, Jose Luis - (Arg); snort-users () lists sourceforge net
Subject:        Re: [Snort-users] Red Hat 9

Hi Jose,
You may want to look here http://www.snort.org/docs/snort_acid_rh9.pdf
Snort 2.0.0, Apache 2.0.45, PHP 4.3.1, MySQL 4.0.12 and Acid 0.9.6b23
install on RedHat 9

I haven't used it myself but it looks pretty comprehensive.

take care
-andy

Talisker Security Tools Directory
http://www.securitywizardry.com
----- Original Message -----
From: "Falvo, Jose Luis - (Arg)" <Jose.Falvo () attla com>
To: <snort-users () lists sourceforge net>
Sent: Tuesday, September 09, 2003 6:57 PM
Subject: [Snort-users] Red Hat 9


Anybody can will tell me, What version of snort,mysql, acid, snort center ,
works fine with Linux Red Hat 9 ?
Thanks,

Jose Luis Falvo
Dpto. Ingeniería
AT&T Latin America
Tel. (54 11) 5288-0182
 Olga Cosentini  1031 - Cap Fed
                                                   Buenos Aires - Argentina

Este mensaje es confidencial. El mismo contiene información reservada
y que no puede ser difundida. Si usted ha recibido este e-mail
por error, por favor avísenos inmediatamente vía e-mail y tenga la
amabilidad de eliminarlo de su sistema; no deberá copiar el mensaje
ni divulgar su contenido a ninguna persona. Muchas gracias.

This message is confidential. It contains information that is privileged and
legally exempt from disclosure. If you have received this e-mail by mistake,

please let us know immediately by e-mail and delete it from your system;
you should also not copy the message nor disclose its contents to anyone.
Thank You.




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users