acid - barnyard - payload

[Jochen Vogel <jvogel () it-sec de>]

hi,

i use snort -> barnyard -> mysql <-acid and want to show the payloads.

is use 2 barnyard scripts:
barnalert for the alert file
barnlog for the log file

if i run barnalert i get messages but no payload

if i run barnlog i get nothing

if i run both barnalert get SID1 and barnlog get SID2 but acid shows SID1
only without payload

if i run both and give barnlog SID1 i get an error message because duplicate
entries.

how can i show the payload?

thx for help
jo


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users