Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Snort - Barnyard2 Plugin starts then fails

    Scheduled Pinned Locked Moved pfSense Packages
    3 Posts 3 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      goulou
      last edited by

      Short of a fresh PFs install is there any way to diagnose Barnyard2 and what the problem is in mysql?

      For required mysql database configuration I tried both examples:

      Example: output database: alert, mysql, dbname=snort user=snort host=localhost password=xyz
      Example: output database: log, mysql, dbname=snort user=snort host=localhost password=xyz

      Googling for help with mysql, I now have 20 seconds or so of success by changing "localhost" to 127.0.0.1 and also tried the actual hostname but no matter what I change, barnyard goes back to red with: barnyard2[2753]: fatal error: database: mysql_error: can't connect to mysql server on '127.0.0.1' (60)

      I could just disable barnyard and let snort run without but it would be nice to figure out what's wrong and get it working. Any ideas?

      Snort 2.8.5.3 pkg v. 1.25 on PFs 1.2.3

      Thank you!

      1 Reply Last reply Reply Quote 0
      • S
        sean.crammond
        last edited by

        Hello everyone,

        First time posting here,  I have the same problem too.

        Pf 1.2.3-release and snort 2.8.6 pkg v. 127

        Thanks for your attention

        1 Reply Last reply Reply Quote 0
        • G
          g4m3c4ck
          last edited by

          I have the same issue with 1.31 to a remote database. A packet capture shows no attempts to connect. However, the system log says it can't connect.

          I have been trying to find a log file somewhere to see what is going on but no luck so far.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.