||04-09-2013 03:15 PM
adding Barnyard2 to Snort w/MySQL - no MySQL error when it was working before
I've been running Snort 2.9.2 for a few months now. It's been logging to a MySQL database.
I decided I wanted to use Barnyard2 as well, and realized it was already installed on my server.
After configuring Barnyard and trying to run it, I get this error:
--== Initializing Barnyard2 ==--
Initializing Input Plugins!
Initializing Output Plugins!
Parsing config file "/etc/snort/barnyard2.conf"
Barnyard2 spooler: Event cache size set to 
Log directory = /var/log/barnyard2
ERROR database: 'mysql' support is not compiled into this build of snort
ERROR: If this build of snort was obtained as a binary distribution (e.g., rpm,
or Windows), then check for alternate builds that contains the necessary
If this build of snort was compiled by you, then re-run the
the ./configure script using the '--with-mysql' switch.
For non-standard installations of a database, the '--with-mysql=DIR'
syntax may need to be used to specify the base directory of the DB install.
See the database documentation for cursory details (doc/README.database).
and the URL to the most recent database plugin documentation.
Fatal Error, Quitting..
I'm confused because I know that snort is configured with MySQL. Is it possible that Barnyard was configured without MySQL? If so how what's the best way to fix that? Or is it possibly a different problem?
Any suggestions are welcome! Thanks in advance! :)