[Snortsam-discussion] Snortsam Password mismatch! error

Frank Knobbe frank at snortsam.net
Fri May 9 10:16:21 EDT 2008


On Thu, 2008-05-08 at 11:12 -0700, Keith Mitchell wrote:
> Yeah no errors.  Checkin successful, then nothing.
> 
> Events are being logged into mysql by barnyard though.
> 
> And I've seen events come through in the logs that are tagged in my
> sid-block.map file.

Remember, Snortsam is an *alert* output plugin. If you run Barnyard in
log mode, it won't trigger the block. Can you check how BY is
configured/run?

-Frank




More information about the Snortsam-discussion mailing list