Snort mailing list archives
Quick Barnyard Question Newbie
From: "Steve Knoch" <sknoch () cmsgrp com>
Date: Tue, 15 Jul 2003 11:00:44 -0400
Hello, Do I have to run 2 instances of barnyard to check both snort.alert and snort.log files? I am currently using two input processor dp_log and dp_alert. I then have 2 acid_db output plugins to log both alerts and logs to my MySQL db. My startup script is barnyard -D -w /*/barn.waldo -c /*/barnyard.conf -d /*/snort -g /*/gen-msg.map -s /*/sid-msg.map. Will this read both unified output files? or did I miss a setting along the way? Is this the best way to do this? Thanks in Advance, Steve ------------------------------------------------------- This SF.Net email sponsored by: Parasoft Error proof Web apps, automate testing & more. Download & eval WebKing and get a free book. www.parasoft.com/bulletproofapps1 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Quick Barnyard Question Newbie Steve Knoch (Jul 15)
- RE: Quick Barnyard Question Newbie Scott Renna (Jul 15)
- <Possible follow-ups>
- RE: Quick Barnyard Question Newbie Steve Knoch (Jul 15)