Snort mailing list archives

Re: Barnyard2 conf syntax for syslog


From: Paul Schmehl <pschmehl_lists () tx rr com>
Date: Fri, 04 Sep 2009 20:43:04 +0000

Yes, I did mean colon, not semi-colon.  I tested that config on my sensor, and 
it worked fine.  IOW, "output alert_syslog: hostname.utdallas.edu 
LOG_AUTH_LOG_INFO" worked for me.  Note that there are no commas separating the 
values of the various attributes, just spaces.

I tested this on a working install of barnyard2 on amd64 FreeBSD 7.2.

--On Friday, September 04, 2009 14:21:04 -0500 "Jefferson, Shawn" 
<Shawn.Jefferson () bcferries com> wrote:


That was just a typo in my email, I have the colon (you mean colon not
semi-colon right?) in the conf file.


-- 
Paul Schmehl, Senior Infosec Analyst
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
*******************************************
"It is as useless to argue with those who have
renounced the use of reason as to administer
medication to the dead." Thomas Jefferson


------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: