LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 07-16-2014, 09:14 PM   #1
l33y
Member
 
Registered: Jan 2014
Location: Gulf Coast, USA
Distribution: Xubuntu
Posts: 50
Blog Entries: 1

Rep: Reputation: Disabled
problem with snort, error when starting barnyard2


I am trying to configure Snort for the first time. My OS is Linux Lubuntu 14.04. I followed all the steps in online tutorials. I have configured snort, barnyard2, snortrules 2960 and daq-2.0.2, and edited various configuration files. I also configured snort report. However I am unable to get any information to my snort report. I am able to start and run snort, getting up to the message that says "Commencing packet processing." But barnyard2 does not appear to run. I get an error when trying to start barnyard2 using the command:

Quote:
sudo barnyard2 -c /usr/local/snort/etc/barnyard2.conf -d /var/log/snort -f snort.u2 -w /var/log/snort/barnyard2.waldo
Here is the error generated (And for some weird reason, I am getting an an empty file (zero bytes) when I try to pipe the entire output of aforementioned command to a file.):

Quote:
ERROR: Unable to open Generator file "/usr/local/snort/etc/gen-msg.map": No such file or directory
ERROR: [Barnyard2Init()]failed while processing [/usr/local/snort/etc/gen-msg.map]
Fatal, error, quitting
The gen-msg.map file does exist though.
 
Old 07-16-2014, 10:06 PM   #2
l33y
Member
 
Registered: Jan 2014
Location: Gulf Coast, USA
Distribution: Xubuntu
Posts: 50
Blog Entries: 1

Original Poster
Rep: Reputation: Disabled
Actually, the gen-msg.map was located in the wrong directory. I moved it to the correct directory, and barnyard2 now runs, I just don't see anything going into the web browser based snortreport. Any help is appreciated.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Using barnyard2 with newer versions of Snort (no mysql) Scottish_Jason Linux - Server 2 01-30-2014 07:39 PM
adding Barnyard2 to Snort w/MySQL - no MySQL error when it was working before estars100 Linux - Software 0 04-11-2013 12:44 AM
Snort with barnyard2 pra838 Linux - Server 3 08-16-2012 05:18 AM
Starting snort: ERROR: User "snort" unknown games1 Linux - Software 3 02-07-2007 09:21 PM
Error when starting up snort: bash:!/bin/sh/usr/local/bin/snort :Eent not found cynthia_thomas Linux - Software 1 11-11-2005 03:59 PM


All times are GMT -5. The time now is 09:25 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration