<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
i just played with it.<br>
got it complied in a freebsd port. if anyone wants it.<br>
<br>
seems it will output ONE but not many<br>
<br>
example:<br>
<br>
if you have mysql output AND fwsam (snort sam) output, then nothing
happens.<br>
<br>
if I have just mysql, it seems to work.<br>
<br>
might be the 'waldo/' things.. I don't know.<br>
<br>
<br>
On 10/7/11 2:37 PM, Matthew Jonkman wrote:
<blockquote
cite="mid:D4F49181-17AF-4DBD-8CF4-3280F983086A@emergingthreatspro.com"
type="cite">
<pre wrap=""><a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://blog.emergingthreatspro.com/2011/07/barnyard2-110-beta-1-release.html">http://blog.emergingthreatspro.com/2011/07/barnyard2-110-beta-1-release.html</a>
CC'ing firnsy, the creator of this lovely addition!
Firnsy: What do we need to do to snortsam to make this go for suricata and for snorts? Anythign unusual? Would be great to get it into ports for snort and suricata!
Thanks
Matt
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
Michael Scheidell, CTO<br>
o: 561-999-5000<br>
d: 561-948-2259<br>
<font color="#999999">></font><font color="#cc0000"> <b>| </b></font>SECNAP
Network Security Corporation
<style type="text/css">
<!--
.unnamed1 {
margin: 1em;
padding: 1px;
} -->
</style>
<ul class="unnamed1">
<li>Best Mobile Solutions Product of 2011</li>
<li>Best Intrusion Prevention Product</li>
<li>Hot Company Finalist 2011</li>
<li>Best Email Security Product</li>
<li>Certified SNORT Integrator</li>
</ul>
</div>
<br>
<div id="disclaimer.secnap.com"><hr />This email has been scanned and certified safe by SpammerTrap®.</div>
<div>For Information please see
<a href="http://www.spammertrap.com/">http://www.spammertrap.com/</a> <hr /></div>
<br>
</body>
</html>