Snort Aanval Barnyard
38 views
Skip to first unread message
JoeBoo
Mar 18, 2008, 10:59:00 AM3/18/08
to Aanval - Snort & Syslog > Intrusion and Correlation Console
Can someone tell me how to configure snort and barnyard to work with
aanval? I specifically need to know what output plugins to use in the
snort.conf and barnyard.conf. I think that I have tried every
combination of log and alert plugins. Barnyard starts fine and seems
to be writing to the DB, but Aanval does not show any new alerts.
aanval? I specifically need to know what output plugins to use in the
snort.conf and barnyard.conf. I think that I have tried every
combination of log and alert plugins. Barnyard starts fine and seems
to be writing to the DB, but Aanval does not show any new alerts.
JoeBoo
Mar 24, 2008, 2:45:22 PM3/24/08
to Aanval - Snort & Syslog > Intrusion and Correlation Console
I fixed my problem. I need to specify the correct sensor id in my
barnyard.conf output plugin line. I also had to make sure to run
idsBackground.pl as the user that the webserver is running as.
barnyard.conf output plugin line. I also had to make sure to run
idsBackground.pl as the user that the webserver is running as.
Reply all
Reply to author
Forward
0 new messages