Skip to content
This repository has been archived by the owner on Apr 19, 2021. It is now read-only.

Remove snorby ref from barnyard2 config #5

Closed
wants to merge 2 commits into from
Closed

Remove snorby ref from barnyard2 config #5

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
7d96ba6
remove snorby entry and mods from barnyard2 conf
petiepooo Mar 2, 2016
4c6a8f7
remove so-snorby-wipe helper script
petiepooo Mar 2, 2016
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion usr/sbin/nsm_sensor_add
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -565,7 +565,6 @@ config hostname: $SENSOR_NAME
config interface: $SENSOR_INTERFACE
input unified2
output sguil: sensor_name=$SENSOR_NAME agent_port=$SENSOR_BARNYARD2_PORT
output database: alert, mysql, user=root dbname=snorby host=127.0.0.1
output alert_syslog: LOG_LOCAL6 LOG_ALERT
EOF_BARNYARD2

Expand Down
12 changes: 0 additions & 12 deletions usr/sbin/nsm_sensor_ps-restart
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -548,12 +548,6 @@ do
touch $BARNYARD2_WALDO
chown $SENSOR_USER:$SENSOR_GROUP $BARNYARD2_WALDO

# update the barnyard2 config for the new version of barnyard2
# that adds the disable_signature_reference_table option
if ! grep disable_signature_reference_table $BARNYARD2_CONFIG >/dev/null 2>&1; then
sed -i 's|output database: alert, mysql, user=root dbname=snorby host=127.0.0.1|output database: alert, mysql, user=root dbname=snorby host=127.0.0.1 disable_signature_reference_table|g' $BARNYARD2_CONFIG
fi

# start barnyard2
[ "$BARNYARD2_ENABLED" == "yes" ] && [ -z "$SKIP_BARNYARD2" ] && $ACTION "barnyard2" "-c $BARNYARD2_CONFIG -u $SENSOR_USER -g $SENSOR_GROUP -d $SENSOR_LOG_DIR -f snort.unified2 -w $BARNYARD2_WALDO -i 1 $BARNYARD2_OPTIONS" "$PROCESS_PID_DIR/$SENSOR/barnyard2.pid" "$PROCESS_LOG_DIR/$SENSOR/barnyard2.log" "barnyard2 (spooler, unified2 format)"
else
Expand All @@ -575,12 +569,6 @@ do
touch $WALDO
chown $SENSOR_USER:$SENSOR_GROUP $WALDO

# update the barnyard2 config for the new version of barnyard2
# that adds the disable_signature_reference_table option
if ! grep disable_signature_reference_table $BARNYARD2_CONFIG >/dev/null 2>&1; then
sed -i 's|output database: alert, mysql, user=root dbname=snorby host=127.0.0.1|output database: alert, mysql, user=root dbname=snorby host=127.0.0.1 disable_signature_reference_table|g' $BARNYARD2_CONFIG
fi

# start barnyard2
[ "$BARNYARD2_ENABLED" == "yes" ] && [ -z "$SKIP_BARNYARD2" ] && $ACTION "barnyard2" "-c $BARNYARD2_CONFIG -u $SENSOR_USER -g $SENSOR_GROUP -d $UNI_DIR -f snort.unified2 -w $WALDO -i $i $BARNYARD2_OPTIONS" "$PID" "$LOG" "barnyard2-$i (spooler, unified2 format)"
done
Expand Down
76 changes: 0 additions & 76 deletions usr/sbin/so-snorby-wipe
View file
Open in desktop

This file was deleted.