Snort mailing list archives

Barnyard's explained


From: "Tom Fulton" <tfulton9909 () comcast net>
Date: Tue, 20 Jul 2004 19:33:22 -0700


Can someone explain what the benefit is of using Barnyard?

I understand that the unified output plug in allows Snort to write alerts
and logs into a single binary file which frees up processing from the
detection engine (as apposed to writing to a flat file, etc) so that Snort
runs faster overall.  However, Snort does that by itself.   I'm not clear on
what value Barnyard adds to this.

thanks

Current thread: