Barnyard2 - Windows Database Compiles under CYGWIN

[mich...@winsnort.com]

I know there is a new version of Barnyard2 coming out (2-1.10) that is supposed to include a few more database options, one of which is SQL Server, and will compile under CYGWIN.

 

Will there be specific guides on how to compile all the available database options under CYGWIN for Windows?

 

It seems that the Barnyard2 team must be testing this in Windows, and maybe just releasing a binary is the answer?

 

What Windows users need, is clear instructions on compiling or binaries made available. Both would be great.

 

I would be willing to write up clear and specific instructions. I just need a rough guide that will actually compile. 

 

Is it possible to compile Barnyard2 with all the optional databases into one executable?

 

TIA....

[beenph]

Michael...i tought we replied to you in an other thread.
-elz

[Michael Steele]

I don't think so. There was nothing specific. There was a note:

--------------------\
Wait for 2-1.10 release to make any build and Support for (MSSQL,ORACLE and
ODBC) is not built in 2-1.10 It will soon enough, and since no body
complained yet most of the user base is MySQL or PostgreSQL.

And if you do not want to wait for 2-1.10 then use my branch "pre-stable"
that can be found @
--------------------/

I probably should wait for a stable release in order to start distributing
the new guides with the Barnyard2 install procedures. Rich did release some
notes on compiling Barnyard2 with CYGWIN but he wasn't real sure if it
worked, and was going to refine it later, and I haven't seen any more
information.

I don't even really need to know the compiling procedures if there will be
binaries made available for windows on stable releases of Barnyard2.

However, I would like to test pre-stable releases and in order to do that I
will need to compile under CYGWIN.

If there will be no binaries made available then I'll need to be able to
compile, which I'll need at least a rough draft that works detailing what is
required for CYGWIN, and the procedure to get at least MySQL, SQL Server,
and Postgresql.

I have zero knowledge of compiling under CYGWIN. For my needs, I'm really
only interested in getting database support into Barnyard2 for the above 3
mentioned databases.

Rich did supply a MySQL, and Postgresql compile of the pre-stable 2-1.10,
and I have refined the Barnyard2 install procedure to fit into my guides.
However, there are a couple items of concern that is holding me back from
posting the new guides.

1) It's pre-stable, and I probably won't release the guides until the stable
version of Barnyard 2 can be released with my guides, or possibly if I can
get item two.
2) There is no SQL Server version of Barnyard2 available.

Kindest regards,
Michael...

WINSNORT.com Management
--
****************** Established ~ 2001 *******************
* Visit Us @ http://www.winsnort.com *
* ~~ FREE WinIDS Snort installation guides ~~ *
* ~~ FREE support forums ~~ *
* Snort: Open Source Network IDS - http://www.snort.org *
*********************************************************

[beenph]

On Sat, Mar 3, 2012 at 1:03 PM, Michael Steele <mich...@winsnort.com> wrote:
> I don't think so. There was nothing specific. There was a note:
>
> --------------------\
> Wait for 2-1.10 release to make any build and Support for (MSSQL,ORACLE and
> ODBC)  is not built in 2-1.10 It will soon enough, and since no body
> complained yet most of the user base is MySQL or PostgreSQL.
>
> And if you do not want to wait for 2-1.10 then use my branch "pre-stable"
> that can be found @
> --------------------/
>

I doubt MSSQL support will be built IN from now on, but you will probably
be able to set it up via ODBC without and issue, since its mainly a
w32 target only.
But who know's what the future will hold.

As of ORACLE it will also probably be only in the new plugin natively
but ODBC will allow you to interface with ORACLE.

As of distribution of a win32 binary we made sure it was compiling under
cygwin because some people asked for it.
And as stated before win32 native compile (is not something in the process).

> I probably should wait for a stable release in order to start distributing
> the new guides with the Barnyard2 install procedures.  Rich did release some
> notes on compiling Barnyard2 with CYGWIN but he wasn't real sure if it
> worked, and was going to refine it later, and I haven't seen any more
> information.
>
> I don't even really need to know the compiling procedures if there will be
> binaries made available for windows on stable releases of Barnyard2.
>

We clearly stated win32 support was not our main objective.

> However, I would like to test pre-stable releases and in order to do that I
> will need to compile under CYGWIN.
>
> If there will be no binaries made available then I'll need to be able to
> compile, which I'll need at least a rough draft that works detailing what is
> required for CYGWIN, and the procedure to get at least MySQL, SQL Server,
> and Postgresql.
>

We do not distribute binaries under any plateform, so w32 is not the
only plateform in
that situation.

If you plan to make a distributed binary make sure you know what you are doing.

> I have zero knowledge of compiling under CYGWIN. For my needs, I'm really
> only interested in getting database support into Barnyard2 for the above 3
> mentioned databases.
>

Its a good opportunity to learn.

> Rich did supply a MySQL, and Postgresql compile of the pre-stable 2-1.10,
> and I have refined the Barnyard2 install procedure to fit into my guides.
> However, there are a couple items of concern that is holding me back from
> posting the new guides.
>
> 1) It's pre-stable, and I probably won't release the guides until the stable
> version of Barnyard 2 can be released with my guides, or possibly if I can
> get item two.

> 2) There is no SQL Server version of Barnyard2 available.

See whats mentionned at the start of the e-mail.

I hope this will shed some light on what could have been missunderstood.
-elz

[Michael Steele]

I was under the assumption that Barnyard2 was actually being compiled under
CYGWIN and at least tested by someone in the Barnyard team for windows. If
this is the case there should be directions on doing this, but maybe not?

When I talked binaries, I was referring to the CYGWIN binaries. I understand
that a REAL Windows version could be a long time coming.

Suricata and Snort want to support Windows, but unless there is a way to
bridge that gap between the log file and the database, you gota ask yourself
why.

I have users that ONLY support Microsoft at their sites, and this means SQL
Server only.

Rich Rumble is supposed to be following up with a more percise guide on how
to compile MySQL and Postgresql. This will help me understand the process.

Kindest regards,
Michael...

-----Original Message-----
From: barnyar...@googlegroups.com
[mailto:barnyar...@googlegroups.com] On Behalf Of beenph
Sent: Saturday, March 03, 2012 10:56 PM
To: barnyar...@googlegroups.com
Subject: Re: Barnyard2 - Windows Database Compiles under CYGWIN

[beenph]

On Sat, Mar 3, 2012 at 11:53 PM, Michael Steele <mich...@winsnort.com> wrote:
> I was under the assumption that Barnyard2 was actually being compiled under
> CYGWIN and at least tested by someone in the Barnyard team for windows. If
> this is the case there should be directions on doing this, but maybe not?
>

It has been tested with mysql and postgresql and it works, no other
output plugin was
tested, but expect further testing in the future since we will support CYGWIN.

Under a cygwin shell barnyard2 should work as expected, but there could be some
"bugs" but most of the call are pretty standard.

If a bug exist under windows it should exist under *nix and vice
versa, unless it would
be a special case.

> When I talked binaries, I was referring to the CYGWIN binaries. I understand
> that a REAL Windows version could be a long time coming.
>

A full compatible windows build will probably be an objective for a
future release of the next major version
revision.

As of the binaries i wanted to put the emphasis that we do not build
package distribution
and if people want to do so they are pretty mutch encouraged to do so
but support to build a package,
unless its a compile issue (which has been addressed) or a operational
issue the packaging process
is left to the discretion of users.

> Suricata and Snort want to support Windows, but unless there is a way to
> bridge that gap between the log file and the database, you gota ask yourself
> why.
>
> I have users that ONLY support Microsoft at their sites, and this means SQL
> Server only.
>

Those users should speak up, and will probably start showing up once
db support will officialy be dropped.

Unless im wrong but snort db support for MSSQL only works under
windows native compilation.
So expect that support for MSSQL will only be supported thru ODBC for now.

> Rich Rumble is supposed to be following up with a more percise guide on how
> to compile MySQL and Postgresql. This will help me understand the process.
>

Well compiling pgsql and mysql for cygwin is pretty straight forward and i think
you can find hints in his previous post that could help you out.

-elz

[Rich Rumble]

On Sun, Mar 4, 2012 at 12:10 AM, beenph <bee...@gmail.com> wrote:
>> Rich Rumble is supposed to be following up with a more percise guide on how
>> to compile MySQL and Postgresql. This will help me understand the process.
>>
> Well compiling pgsql and mysql for cygwin is pretty straight forward and i think
> you can find hints in his previous post that could help you out.

Once 2.10 is out I will start fresh with a new cygwin environment to
document all
the steps for someone completely new to the process. I have sent my binaries
to a number of people since first compiling BY2 a few months ago (with so much
help/hand-holding from Eric, thanks again). So I know of about 15 other people
interested in windows binaries for BY2, however that is a small amount compared
to all those that use it on *nix. I don't know if the Suricata team
are contributing
to this side of BY2 (if they are contributing anything to by2), but
since they do
have a Cygwin (and used to have MinGW build) build, I would think that they
would need to do something to get Unified2 logs into DB's. Since Snort
is dropping
DB output plugins, perhaps they too will be future contributors to BY2.
I know I can compile the binaries, I just wish I could help further,
but I'm out of
my depth when it comes to programming.
-rich

[Michael Steele]

There will be a lot more interested when the output database option is
removed from snort, and even more when Suricata has real Windows support.

It will be a lot better when there is true support for 64bit Windows. I
think it's hung up at getting Suricata, Snort, and barnyard into 64bit
versions, everything else is there. Barnyard2 will need a lot of work to get
it truly Windows usable.

If there was support for MySQL, PostgreSQL, and ODBC as database options in
Barnyard2, that would be sufficient.

Using ODBC for SQL Server won't be a problem, just a few extra steps in
Windows to activate ODBC.

My guides only deal with Snort using a MySQL, or SQL Server. I just started
to create an install with PostgreSQL. I think I'm going to have to reach out
for help.

Suricata and Snort will be relying on Barnyard2 to process their respective
unified2 log files and move the events into the database.

I'm assuming that Barnyard2 can be compiled with all three database logging
options (MySQL, PostgreSQL, and ODBC) into a single compile?

I'm going to stop trying to compile Barnyard2, and wait for you to create a
guide when 2-1.10 is released. I'm just confused at this point :)

Kindest regards,
Michael...

WINSNORT.com Management Team Member

--
****************** Established ~ 2001 *******************
* Visit Us @ http://www.winsnort.com *
* ~~ FREE WinIDS Snort installation guides ~~ *
* ~~ FREE support forums ~~ *
* Snort: Open Source Network IDS - http://www.snort.org *
*********************************************************

-----Original Message-----
From: barnyar...@googlegroups.com
[mailto:barnyar...@googlegroups.com] On Behalf Of Rich Rumble
Sent: Sunday, March 04, 2012 10:17 AM
To: barnyar...@googlegroups.com
Subject: Re: Barnyard2 - Windows Database Compiles under CYGWIN