[Snort-users] Base Barnyard and Unified Logs

Jim O'Leary j_oleary_langara at ...4554...
Mon Mar 14 10:53:31 EST 2005

Okay, so Barnyard can't take an ASCII Snort alert log and put it into MySQL.
Is there any other way to do that? Can Snort convert its own text alerts
into unified format? Is there another tool that will put Snort text alerts
into MySQL, or convert alerts into unified format?

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Michael
Sent: Monday, March 14, 2005 10:48 AM
To: Wes Young; snort-users at lists.sourceforge.net
Subject: RE: [Snort-users] Base Barnyard and Unified Logs

The issues is barnyard.

Barnyard only stores the sid, and THEN, reads sid-msg.map for signature

SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list