• barnyard2/doc/README.snortsam
• Установка на FreeBSD 9 системы анализа Snort и блокировки SnortSAM зловредного трафика!
• snort generate logs，barnyard2 can not read records

# pkg install barnyard2 # no need, install as snort dependence

# mkdir /var/log/barnyard2

# cat /usr/local/etc/barnyard2.conf

...
output alert_fwsam: 127.0.0.1:898/secret

# cat /usr/local/etc/snort/snort.conf

...
output unified2: filename snort.log
...

# cat /usr/local/etc/sid-block.map

1256: src, 2 min
1000001: src, 2 min

# /usr/local/bin/barnyard2 -c /usr/local/etc/barnyard2.conf -d /var/log/snort/ -f snort.log

# cat /etc/rc.conf
...

barnyard2_enable=yes
barnyard2_flags="-D -d /var/log/snort/ -f snort.log"
...