|
|
Choosing A Webhost: |
Barnyard outputting to both acid and sguil via MySQL on remote DB server: msg#00002security.ids.snort.barnyard.user
I'm having a problem getting Barnyard to push data into my acid db. It's working well for sguil in a seperate DB, but I'm not getting any data in the acid DB. I'm also not getting any erros from Barnyard, or any indication that it actually started the acid output plugin. Is anyone running both? Is there something else I need for acid output? My Barnyard config line for acid is: output alert_acid_db: mysql, sensor_id 1, database acid, server ids-db, user acidviewer, password mypassword Barnyard starts up fine: Barnyard Version 0.2.0 (Build 32) Opened spool file '/nsm/sensor1/snort.log.1106164949' OpSguil_Start Closing spool file '/nsm/sensor1/snort.log.1106164949'. Read 38469 records Opened spool file '/nsm/sensor1/snort.log.1106665894' Waiting for new data I'm getting alerts in sguil so I know snort is working etc. I'm running OpenBSD 3.6, Barnyard 0.2.0, Snort 2.3RC1... ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl
|
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| Previous by Date: | Re: Problems with barnyard 0.2.0 locking-up while updating sguild, Bamm Visscher |
|---|---|
| Next by Date: | Re: Barnyard outputting to both acid and sguil via MySQL on remote DB server, Andrew R. Baker |
| Previous by Thread: | Problems with barnyard 0.2.0 locking-up while updating sguild, Cool C |
| Next by Thread: | Re: Barnyard outputting to both acid and sguil via MySQL on remote DB server, Andrew R. Baker |
| Indexes: | [Date] [Thread] [Top] [All Lists] |
Free MagazinesCisco NewsReceive a free quarterly e-newsletter with exclusive articles on how Cisco IT uses its own products and solutions to enable the business. subscribe Systems Management News, the newspaper for IT systems administration and data center managers! Each issue of Systems Management News is chock-full of news and analysis to help you understand what's happening in your field. subscribe The Enterprise Newsweekly eWeek is the essential technology information source for builders of e-business. subscribe Oracle Magazine Oracle Magazine contains technology strategy articles, sample code, tips, Oracle and partner news, how to articles for developers and DBAs, and more. Oracle (NASDAQ: ORCL) is the world's largest enterprise software company. subscribe Total Telecom Total Telecom is "The Economist of the communications industry". subscribe |