Snort mailing list archives

Re: my first snort- error obstacles in the barnyard


From: firnsy <firnsy () securixlive com>
Date: Tue, 01 Sep 2009 06:05:02 +0930

Ron Kaye Jr wrote:
this is my first snort
i am close to successful completion.

i am using the snort 2.8.4.1 ubuntu 9 install guide

i am having an issue with barnyard.
the doc references 2-1.5

couldnt find 2-1.5

It has been superseded.

installed 2-1.6

That is the current stable version, however 1.7 is in beta and a day or two from being released.

my recollection is that it doesnt find barnyard.waldo, and i have read that i cant touch to create the file.

This was addressed in 1.6 and sadly re-addressed though under a different guise in 1.7-beta


i have also discovered that -0.2.0 may have been installed by mistake.


You can test what version you have via "barnyard2 -V"

how do i uninstall both versions?

There's not a lot of files to remove, "make uninstall" should work as expected.

then i can reinstall 2-1.6

will snort work without barnyard?

Sure will, barnyard/barnyard2 are designed to offload the output processing of snort on heavier loaded networks. You can take almost any existing barnyard/barnyard2 directive and use that within snort.


I'M STUCK WITH COMPLETION NEAR!


That's it, let it all out.

Regards,

--
firnsy
www.securixlive.com

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: