Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Snort-users] Barnyard for Windows? |
|---|---|
| Date: | Wed, 22 Aug 2007 13:28:37 -0400 |
I've not tried to compile it lately but I know it has been done. You can also use SnortUnified.pm and put together what you need. I'll be releasing an updated Database module for it as time permits, this will allow direct drop in replacement for BASE when desired. Michael Steele wrote:
Does anyone know if there will be any Barnyard solution for the Windows environment? Kindest regards, Michael... WINSNORT.com Management Team Member -- ****************** Established ~ 2001 ******************* * Visit Us @ http://www.winsnort.com * * ~~ FREE WinIDS Snort installation guides ~~ * * ~~ FREE support forums ~~ * * Snort: Open Source Network IDS - http://www.snort.org * ********************************************************* -----Original Message----- From: snort-users-bounces@lists.sourceforge.net [mailto:snort-users-bounces@lists.sourceforge.net] On Behalf Of Joel Esler Sent: Monday, August 20, 2007 7:47 AM To: James Lay Cc: Snort Subject: Re: [Snort-users] Diagnosing MySQL server has gone away messages James, yes, this happens when Snort hasn't inserted anything to mysql in a bit. Mysql will time out the connection. I suggest the use of the unified output plugin, then use "barnyard" to read those unified files and insert them into the database. As a general recommendation for everyone on the list, Snort should never be logging directly to the DB. Joel On Sun, Aug 19, 2007 at 07:53:58PM -0600, it looks like James Lay sent me:Hey all! Subject says it all...anyone else get these? All I have to do isrestartsnort and life is fine. Tested out manually during the times thatsnortsays mysql has gone away with mysql -h 10.0.0.39 -u bleh -p and Iconnectright off. Any hints on this? Thank you! James------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/_______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users----- joel esler http://demo.sourcefire.com/jesler.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
| Previous by Date: | Re: [Snort-users] Listening to Wrong Interface (OS X), Jason |
|---|---|
| Next by Date: | Re: [Snort-users] Listening to Wrong Interface (OS X), Quantum Scientific |
| Previous by Thread: | [Snort-users] Barnyard for Windows?, Michael Steele |
| Next by Thread: | Re: [Snort-users] Diagnosing MySQL server has gone away messages, bleh |
| Indexes: | [Date] [Thread] [Top] [All Lists] |