[Snort-users] Converting ASCII logs to Unified Format

Esler, Joel CNTR/Sytex joel.esler at ...9426...
Mon Mar 14 08:16:30 EST 2005

Unified format is completely different from the ASCII log.  I would
double check your Snort.conf settings.


On Sat, 2005-03-12 at 22:03 -0800, Jim O'Leary wrote:

> I have Snort set up so that it outputs logs and alerts to the binary
> "unified" format. I also have barnyard set  up so that it reads those
> binary files and sticks them into a MySQL database. 
> The problem is, I've been given a group of Snort output files that are
> in the ASCII format.  How do I convert these files to "unified" so I
> can get barnyard to stick them into MySQL?
> Thanks 

Esler, Joel CNTR/Sytex <joel.esler at ...9426...>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20050314/22add0d4/attachment.html>

More information about the Snort-users mailing list