Re: Barnyard2 unable to start service

[Pratibha Rajan <pratibha.nair12 () outlook com>]

Thanks for taking the time Ian, we tried all the options accept rebuiling it. Nothing seems to work. We will give that 
a try as well, else just continue running barnyard in continuous mode.

Thanks again
Pratibha

> To: snort-users () lists sourceforge net
> From: snort_list () fishnet co uk
> Date: Fri, 19 Aug 2016 10:36:58 +0100
> Subject: Re: [Snort-users] Barnyard2 unable to start service
>
> On 17/08/2016 21:43, Pratibha Rajan wrote:
> > Hi Bala/ All,
> >
> > Is there any symlink that we need to create?
> >
> > When I run the script to run barnyard in continuous mode it seems to run :
> >
> > /usr/local/bin/barnyard2 -c /etc/snort/barnyard2.conf -d /var/log/snort
> > -f snort.log -w /var/log/barnyard2/barnyard2.waldo 
> >
> > But daemon mode fails:
> >
> > Aug 17 16:32:59 tparheidsp001 barnyard2: Starting Snort Output Processor
> > (barnyard2): /bin/bash: barnyard2: command not found
> > Aug 17 16:32:59 tparheidsp001 barnyard2: [FAILED]
> > Aug 17 16:32:59 tparheidsp001 systemd: barnyard2.service: control
> > process exited, code=exited status=1
> > Aug 17 16:32:59 tparheidsp001 systemd: Unit barnyard2.service entered
> > failed state.
> > Aug 17 16:32:59 tparheidsp001 systemd: barnyard2.service failed.
> >
> >
> > Thanks 
> >
> > Pratibha
>
>
> Hi,
>
> In the original script, change line 40 from
>
>       daemon $prog $BARNYARD_OPTS
>
> to
>
>       daemon /usr/local/bin/$prog $BARNYARD_OPTS
>
> Otherwise the other locations used by the $prog variable will be affected.
>
>
> Alternatively create a symlink:
>
>       ln -s /usr/local/bin/barnyard2 /usr/bin/barnyard2
>
>
> Or you can uninstall barnyard2 (run 'make uninstall' in the source
> folder) then rebuild with a different prefix:
>
>       configure --prefix=/usr
>
>
> And finally you could also alter the path variable for your init system
> to include /usr/local/bin
>
> You'll have to look up how to do the last one as I have mainly managed
> to avoid systemd so far ;)
>
> Regards
>
> Ian
> -- 
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!