Snort mailing list archives

Re: Barnyard2 - v2-1.10 is released


From: Nigel Houghton <nhoughton () sourcefire com>
Date: Fri, 28 Sep 2012 09:54:11 -0400


On Sep 28, 2012, at 12:58 AM, AllowOverride <allowoverride () gmail com> wrote:

he configuration is installed by default
to /usr/local/etc/barnyard2.conf

exactly my point! why /usr/local, why not /etc/snort. /usr/local should
be used for stuff that is not a service, but local programs. snort is a
daemon, and daemon traditionally go in /etc, freebsd users
are /usr/local/etc, cuz ports like putting things there. i guess i
should have mentioned im using linux. 

aside from where this and that is placed, /usr/local/etc/barnyard2.conf
as a location makes no sense to me. it just gets burried, and the vast
majority wont find it there until they run a script that says, it can't
find such and such, then pulledpork will say, it cant find rules,
barnyard2, so forth. sorry this is my only point here. 


For Linux things (if only the distributions followed this):

 http://linux.die.net/man/7/hier

and FTW:

 http://www.freebsd.org/cgi/man.cgi?query=hier&apropos=0&sektion=0&manpath=FreeBSD+9.0-RELEASE&arch=default&format=html

--
Nigel Houghton
Head Mentalist, Time Lord
SF VRT Department of Intelligence Excellence
http://vrt-blog.snort.org/ && http://labs.snort.org/


------------------------------------------------------------------------------
Got visibility?
Most devs has no idea what their production app looks like.
Find out how fast your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219671;13503038;y?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: