Snort mailing list archives
barnyard question
From: "Mark Olbert" <mark () arcabama com>
Date: Mon, 23 Feb 2004 11:27:21 -0800
I'm having some trouble figuring out how to run barnyard. I used snort to create a binary snort.log file: [root@sox /home/sources/barnyard-0.1.0/docs]# ls -l /var/log/snort total 22 -rw------- 1 root root 21348 Feb 23 11:22 snort.log.1077564067 but when I do what I think is correct to read it: [root@sox /home/sources/barnyard-0.1.0/docs]# barnyard -c /etc/snort/barnyard.conf -d /var/log/snort -f snort.log.1077564067 -o -*> Barnyard! <*- Version 0.1.0 (Build 17) By Andrew R. Baker (andrewb () snort org) and Martin Roesch (roesch () sourcefire com , www.snort.org) Loading Data Processors... dp_alert loaded dp_log loaded dp_stream_stat loaded Loading Built-in Output Plugins... Fast Alert plugin initialized AlertSyslog initialized Log Dump plugin initialized LogPcap initialized AlertCSV initialized Parsing Config file: /etc/snort/barnyard.conf Barnyard Version 0.1.0 (Build 17) started I get this messasge: ERROR => No input plugin found for magic: a1b2c3d4 Fatal Error, Quitting.. Exiting Obviously I'm doing something wrong. - Mark mark () arcabama com
Current thread:
- barnyard question Mark Olbert (Feb 23)