[Sguil-users] About message "Barnyard2 is disconnected"
Status: Beta
Brought to you by:
bamm
From: C. L. M. <car...@gm...> - 2014-04-11 06:12:32
|
Hi all, In one host, I have two sensors running: snort and suricata. I have configured snort_agent and barnyard2 components only (pcap and sancp are running on other host). All works ok: barnyard2 sends alerts via snort_agent to the sguil server without problems. But every minute, under "System msg" in Sguil client I see the warning: "Barnyard2 is disconnected", but this is not true because all works ok. Any idea why? How can I debug this?? Thanks. |