or you can use SnortUnified.pm, the code in SVN has preliminary support
for unified2 files.
If anyone wants to share some unified2 files with me, and more
specifically, unified2 files with events generated on IPV6 networks, I
would be appreciative.
http://www.snort.org/users/jbrvenik
The first post has the relevant bits.
Jeff Dell wrote:
Authors are Andrew and Marty.. why don't they change it. :) it would suck to
have to re-write something that has been stable for 3 years to add support
for unified2 and ipv6.
Cheers,
Jeff
-----Original Message-----
From: snort-users-bounces@lists.sourceforge.net
[mailto:snort-users-bounces@lists.sourceforge.net] On Behalf Of
randy@procyonlabs.com
Sent: Friday, November 09, 2007 4:41 PM
To: joel.esler@sourcefire.com
Cc: snort-users@lists.sourceforge.net
Subject: Re: [Snort-users] Barnyard
<SNIP>
2) Don't have Snort writing directly to DB. Please look into
Barnyard.
Joel
Who is maintaining Barnyard? Is it abandonware now?
I've been tempted to start working on it myself, but I'm not sure if
there is any effort already in place that hasn't been openly
discussed yet.
Ideas? Comments?
No, it's not abandonware. There has been no need to update it because
the db schema, unified schema, and all others haven't changed in years.
There are some licensing issues with Barnyard. It is not GPL.
My wish is for Oracle and DB2 support. As far as I can tell, that isn't
possible with 2.0.
I didn't realize it wasn't GPL. How unfortunate.
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
