Re: ERROR starting barnyard ; No input plugin found for magic: a1b2c3d4

Ekblad, Eric M (Getronics) wrote:
>  
>
> Howdy...thanks to anyone for entertaining my query....
>
>  
>
> I am having problems getting started with Barnyard parsing the output
> from Snort.  I am trying to run continual mode.
>
>  
>
> Error: 
>
> ERROR: No input plugin found for magic: a1b2c3d4

You are attempting to read a pcap output file.  You need to enable 
Snort's unified output system for use with Barnyard.  The following 
lines enable both unified alert and log output from Snort:

output alert_unified: filename unified.alert
output log_unified: filename unified.log

The difference between them is that log output includes packet data 
while alert output only has the event details.  Which one you need 
depends on which output plug-ins you are trying to use with Barnyard.

Hope this helps,
-Andrew



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/