[Snort-users] Snorby problems.

JJ Cummings cummingsj at ...11827...
Thu Apr 8 11:27:13 EDT 2010


is there data in your database... i.e. snort has produced an event, written
to unified2, that file was picked up and ready by barnyard2 then written to
the mysql database?

On Wed, Apr 7, 2010 at 8:49 PM, Kum Weng Luey <kumwengluey at ...11827...> wrote:

> Hi all,
>
> It's me again. I have finally got Snort and barnyard2 running. While
> looking for a good GUI front-end I came across Snorby. I've followed the
> installation instructions available on the web and got the front end
> running. But nothing is ever displayed. I double checked the database.yml
> and checked mysql database and everything looks alright.
>
> What went wrong?
>
> Sample of database.yml of snorby:
>
> production:
>   adapter: mysql
>   database: snort
>   username: root
>   password: test
>   host: localhost
>
> tables in mysql snort DB:
> +-------------------+
> | Tables_in_snort   |
> +-------------------+
> | calc_caches       |
> | comments          |
> | data              |
> | detail            |
> | encoding          |
> | event             |
> | icmphdr           |
> | importances       |
> | iphdr             |
> | opt               |
> | reference         |
> | reference_system  |
> | reports           |
> | schema            |
> | schema_migrations |
> | searches          |
> | sensor            |
> | sessions          |
> | settings          |
> | sig_class         |
> | sig_reference     |
> | signature         |
> | tcphdr            |
> | udphdr            |
> | users             |
> +-------------------+
>
> Regards,
> Extremely Puzzled guy
>
>
> ------------------------------------------------------------------------------
> Download Intel® Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20100408/7696efaa/attachment.html>


More information about the Snort-users mailing list