• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Snort / barnyard, please explain the feature for a noob

Scheduled Pinned Locked Moved pfSense Packages
4 Posts 2 Posters 4.7k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • F
    fribert
    last edited by Jul 7, 2010, 6:56 AM

    Hi Guys

    So, I put snort on the pfsense after moving it to a physical machine again, and then I see that barnyard2 is included.
    I can see from the description that it ofloads the snort from doing the logging, and let's barnyard2 do it for it.
    I also understands that it does it to a mysql db (so far).
    I've created the database, and the db user.
    But I don't see any tables created in the db, am I supposed to do that myself? If so, what tables?
    Is the idea that I can read the logs from a workstation, or just from snort itself?

    1 Reply Last reply Reply Quote 0
    • G
      g4m3c4ck
      last edited by Jul 15, 2010, 5:54 AM

      http://www.securityjokes.com/2010/04/pfsense-remote-logging-and-snorby.html

      1 Reply Last reply Reply Quote 0
      • F
        fribert
        last edited by Jul 15, 2010, 11:07 AM

        Huh!

        Why on earth do you send a link on how to install it?

        I know snort, I just wanted to find out why barnyard2 is a big advantage, as far as I can see it's only that it logs to a mysql server…

        1 Reply Last reply Reply Quote 0
        • G
          g4m3c4ck
          last edited by Jul 19, 2010, 3:13 AM

          Well I gave you that link because it gives you the necessary information to get barynyard2 up and running.

          With barnyard2 not only does it make snort work faster by using mysql it also allows you to use one of the many frontends for snort such as snorby.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
            This community forum collects and processes your personal information.
            consent.not_received