[Sguil-users] Unable to open spool file

[Loc N. <lo...@ea...>]

Hi all,

I am new with Snort GUI so your help is appricated.
I got the following error message when I run barnyard

# barnyard -c /usr/local/etc/snort/barnyard.conf -d /usr/local/etc/snort
 -g /usr/local/etc/snort/gen-msg.map -s /usr/local/etc/snort/sid-msg.map
 -f snort.log -w /usr/local/etc/snort/waldo.file

 -*> Barnyard! <*-
 Version 0.1.0 (Build 17)
 By Andrew R. Baker (andrewbsnort.org)
 and Martin Roesch (roeschsourcefire.com, www.snort.org)

 Loading Data Processors...
 dp_alert loaded
 dp_log loaded
 dp_stream_stat loaded
 Loading Built-in Output Plugins...
 Fast Alert plugin initialized
 AlertSyslog initialized
 Log Dump plugin initialized
 LogPcap initialized
 AlertCSV initialized
 Parsing Config file: /usr/local/etc/snort/barnyard.conf
 WARNING /usr/local/etc/snort/barnyard.conf(158) => Unknown output plugin
 "sguil" referenced, ignoring!Barnyard Version 0.1.0 (Build 17) started
 Unable to open spool file
 Exiting

I follow the instructions in "sguil_install_guide_for_release_0-2-5.pdf".
What did i do wrong ?

Thanks

Loc Nguyen