Snort mailing list archives

Re: [Barnyard-users] Barnyard alert_fast and log_dump question ...


From: Bamm Visscher <bamm () satx rr com>
Date: Tue, 5 Oct 2004 08:06:49 -0500

I've heard rumors that the unified output format and/or barnyard will be revamped some. Is there some reason you can't 
just run two instances of barnyard (one to watch unified alert and output to alert_fast. And another to watch unified 
log and ouput to DB)?

Bammkkkk

On Mon, Oct 04, 2004 at 09:05:17PM -0600, Sam Evans wrote:
Thanks for the reply .. 

Do you know if this type of functionality will be added into future
updates of Barnyard?  I could probably hack something together, but
would rather have something more official as my C skills are quite
weak.

Thanks again,
Sam





-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: