<![CDATA[Latest posts for the topic "Xin giúp đỡ lỗi barnyard2: Unable to open waldo file"]]> /hvaonline/posts/list/24.html JForum - http://www.jforum.net Xin giúp đỡ lỗi barnyard2: Unable to open waldo file snort-2.9.4-1: - /etc/snort/snort.conf: .... output unified2: filename snort.log, limit 128, mpls_event_types, vlan_event_types .... - /etc/sysconfig/snort: INTERFACE=eth0 CONF=/etc/snort/snort.conf USER=snort GROUP=snort PASS_FIRST=0 LOGDIR=/var/log/snort ALERTMODE=fast DUMP_APP=1 BINARY_LOG=1 NO_PACKET_LOG=0 PRINT_INTERFACE=0 SYSLOG=/var/log/messages SECS=5 barnyard2-1.9 - /etc/barnyard2/barnyard2.conf ..... config hostname: localhost config interface: eth0 config waldo_file: /etc/barnyard2/barnyard2.waldo input unified2 output alert_fast: stdout output database: log, mysql, user=root password=123456 dbname=snortdb host=localhost Snort đã chạy bình thường và đã alert vào file /var/log/snort/alert Mình chạy barnyard : barnyard2 -c /etc/barnyard2/barnyard2.conf -d /var/log/snort -f snort.log -w /etc/barnyard2/barnyard2.waldo Kết quả : .....v.v WARNING: Unable to open waldo file '/etc/barnyard2/barnyard2.waldo' (No such file or directory) Opened spool file '/var/log/snort/snort.log.1358752156' Closing spool file '/var/log/snort/snort.log.1358752156'. Read 0 records Opened spool file '/var/log/snort/snort.log.1358754263' Waiting for new data và barnyard2 cũng ko ghi gì vào db cả. nên Base cũng ko hiển thị Mong mọi người giúp đỡ ]]> /hvaonline/posts/list/44240.html#273275 /hvaonline/posts/list/44240.html#273275 GMT Xin giúp đỡ lỗi barnyard2: Unable to open waldo file Code:
ls -l /etc/barnyard2/barnyard2.waldo
2. Bạn chạy `barnyard2` dưới quyền của user nào?]]> /hvaonline/posts/list/44240.html#273293 /hvaonline/posts/list/44240.html#273293 GMT Xin giúp đỡ lỗi barnyard2: Unable to open waldo file /hvaonline/posts/list/44240.html#273310 /hvaonline/posts/list/44240.html#273310 GMT