RE: barnyard to db

["Frank Reid" <fcreid () ourcorner org>]

I'm confused on barnyard.  From mailing list discussion and docs, I
presume it rolls up the Snort binary output and performs the database
insertions directly (rather than having Snort insert "real-time" into
the database via the output preprocessor).  Is that's correct, then is
it of most value if Snort and the database live on the same box?  In a
distributed Snort sensor environment, one would have to "collect" the
Snort output by some other means, then have barnyard read it into the
database?

Frank



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users