Snort - Barnyard2 Plugin starts then fails



  • Short of a fresh PFs install is there any way to diagnose Barnyard2 and what the problem is in mysql?

    For required mysql database configuration I tried both examples:

    Example: output database: alert, mysql, dbname=snort user=snort host=localhost password=xyz
    Example: output database: log, mysql, dbname=snort user=snort host=localhost password=xyz

    Googling for help with mysql, I now have 20 seconds or so of success by changing "localhost" to 127.0.0.1 and also tried the actual hostname but no matter what I change, barnyard goes back to red with: barnyard2[2753]: fatal error: database: mysql_error: can't connect to mysql server on '127.0.0.1' (60)

    I could just disable barnyard and let snort run without but it would be nice to figure out what's wrong and get it working. Any ideas?

    Snort 2.8.5.3 pkg v. 1.25 on PFs 1.2.3

    Thank you!



  • Hello everyone,

    First time posting here,  I have the same problem too.

    Pf 1.2.3-release and snort 2.8.6 pkg v. 127

    Thanks for your attention



  • I have the same issue with 1.31 to a remote database. A packet capture shows no attempts to connect. However, the system log says it can't connect.

    I have been trying to find a log file somewhere to see what is going on but no luck so far.


Log in to reply