{"id":20152179,"url":"https://github.com/mfurquimdev/barnyard_dogzilla","last_synced_at":"2026-01-28T21:01:30.217Z","repository":{"id":151960989,"uuid":"70619114","full_name":"mfurquimdev/barnyard_dogzilla","owner":"mfurquimdev","description":null,"archived":false,"fork":false,"pushed_at":"2016-10-11T17:38:57.000Z","size":1134,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"breno","last_synced_at":"2025-06-02T11:49:19.596Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mfurquimdev.png","metadata":{"files":{"readme":"README","changelog":null,"contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-10-11T17:38:15.000Z","updated_at":"2016-10-11T17:38:15.000Z","dependencies_parsed_at":"2023-06-02T05:00:25.878Z","dependency_job_id":null,"html_url":"https://github.com/mfurquimdev/barnyard_dogzilla","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/mfurquimdev/barnyard_dogzilla","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mfurquimdev%2Fbarnyard_dogzilla","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mfurquimdev%2Fbarnyard_dogzilla/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mfurquimdev%2Fbarnyard_dogzilla/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mfurquimdev%2Fbarnyard_dogzilla/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mfurquimdev","download_url":"https://codeload.github.com/mfurquimdev/barnyard_dogzilla/tar.gz/refs/heads/breno","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mfurquimdev%2Fbarnyard_dogzilla/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28851838,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-28T15:15:36.453Z","status":"ssl_error","status_checked_at":"2026-01-28T15:15:13.020Z","response_time":57,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-13T23:09:10.578Z","updated_at":"2026-01-28T21:01:30.193Z","avatar_url":"https://github.com/mfurquimdev.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"\n------------------------------------------------------------------------------\n0. SUMMARY\n------------------------------------------------------------------------------\n\nThis is a fork of Barnyard2 - version 2-1.14.\n\nThis version has the output module for Hogzilla.\n\nThis README contains some quick information about how to set up and\nconfigure barnyard2 to ensure it works as it should.\n\nDistribution site for the fork version:\nhttp://www.ids-hogzilla.org\nhttp://www.github.com/pauloangelo/barnyard2\n\nDistribution site for the original Barnyard2:\nhttp://www.securixlive.com\nhttp://www.github.com/firnsy/barnyard2\n\n\n------------------------------------------------------------------------------\n1. COPYRIGHT\n------------------------------------------------------------------------------\n\nCopyright (C)2008-2013 Ian Firns     \u003cfirnsy@securixlive.com\u003e\nCopyright (C)2008-2010 SecurixLive   \u003cdev@securixlive.com\u003e\n\nThis program is free software; you can redistribute it and/or modify\nit under the terms of the GNU General Public License Version 2 as\npublished by the Free Software Foundation.  You may not use, modify or\ndistribute this program under any other version of the GNU General\nPublic License.\n\nThis program is distributed in the hope that it will be useful,\nbut WITHOUT ANY WARRANTY; without even the implied warranty of\nMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\nGNU General Public License for more details.\n\nYou should have received a copy of the GNU General Public License\nalong with this program; if not, write to the Free Software\nFoundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.\n\nSome of this code has been taken from Snort, which was developed by\nMartin Roesch and The Snort Team (http://www.snort.org/team.html).\n\nSome of this code has been taken from barnyard, which was developed by\nMartin Roesch and Andrew R. Baker.\n\nSome of this code has been taken from tcpdump, which was developed\nby the Network Research Group at Lawrence Berkeley National Lab,\nand is copyrighted by the University of California Regents.\n\n\n------------------------------------------------------------------------------\n2. DESCRIPTION\n------------------------------------------------------------------------------\n\nBarnyard2 is an open source interpreter for Snort unified2 binary output files.\nIts primary use is allowing Snort to write to disk in an efficient manner and\nleaving the task of parsing binary data into various formats to a separate\nprocess that will not cause Snort to miss network traffic.\n\nBarnyard2 has 3 modes of operation:\n  1. batch (or one-shot),\n  2. continual, and\n  3. continual w/ bookmark.\n\nIn batch (or one-shot) mode, barnyard2 will process the explicitly specified\nfile(s) and exit.\n\nIn continual mode, barnyard2 will start with a location to look and a specified\nfile pattern and continue to process new data (and new spool files) as they\nappear.\n\nContinual mode w/ bookmarking will also use a checkpoint file (or waldo file in\nthe snort world) to track where it is. In the event the barnyard2 process ends\nwhile a waldo file is in use, barnyard2 will resume processing at the last\nentry as listed in the waldo file.\n\nThe \"-f\", \"-w\", and \"-o\" options are used to determine which mode barnyard2\nwill run in.  It is legal for both the \"-f\" and \"-w\" options to be used on the\ncommand line at the same time, however any data that exists in the waldo file\nwill override the command line data from the \"-f\" and \"-d\" options. See the\ncommand directives section below for more detail.\n\nBarnyard2 processing is controlled by two main types of directives: input\nprocessors and output plugins. The input processors read information in from a\nspecific format ( currently the spo_unified2 output module of Snort ) and\noutput them in one of several ways.\n\n\n------------------------------------------------------------------------------\n3. USAGE\n------------------------------------------------------------------------------\n\nCommand line:\n\n    barnyard2 [-options]\n\n\n    Gernal Options:\n\n        -c \u003cfile\u003e  Use configuration file \u003cfile\u003e\n        -C \u003cfile\u003e  Read the classification map from \u003cfile\u003e\n        -D         Run barnyard2 in background (daemon) mode\n        -e         Display the second layer header info\n        -E         Log alert messages to NT Eventlog. (Win32 only)\n        -F         Turn off fflush() calls after binary log writes\n        -g \u003cgname\u003e Run barnyard2 gid as \u003cgname\u003e group (or gid) after initialization\n        -G \u003cfile\u003e  Read the gen-msg map from \u003cfile\u003e\n        -h \u003cname\u003e  Define the hostname \u003cname\u003e. For logging purposes only\n        -i \u003cif\u003e    Define the interface \u003cif\u003e. For logging purposes only\n        -I         Add Interface name to alert output\n        -l \u003cld\u003e    Log to directory \u003cld\u003e\n        -m \u003cumask\u003e Set umask = \u003cumask\u003e\n        -O         Obfuscate the logged IP addresses\n        -q         Quiet. Don't show banner and status report\n        -r \u003cid\u003e    Include 'id' in barnyard2_intf\u003cid\u003e.pid file name\n        -R \u003cfile\u003e  Read the reference map from \u003cfile\u003e\n        -S \u003cfile\u003e  Read the sid-msg map from \u003cfile\u003e\n        -t \u003cdir\u003e   Chroots process to \u003cdir\u003e after initialization\n        -T         Test and report on the current barnyard2 configuration\n        -u \u003cuname\u003e Run barnyard2 uid as \u003cuname\u003e user (or uid) after initialization\n        -U         Use UTC for timestamps\n        -v         Be verbose\n        -V         Show version number\n        -?         Show this information\n\n    Continual Processing Options:\n        -a \u003cdir\u003e   Archive processed files to \u003cdir\u003e\n        -f \u003cbase\u003e  Use \u003cbase\u003e as the base filename pattern\n        -d \u003cdir\u003e   Spool files from \u003cdir\u003e\n        -n         Only process new events\n        -w \u003cfile\u003e  Enable bookmarking using \u003cfile\u003e\n\n    Batch Processing Mode Options:\n        -o         Enable batch processing mode\n\n\n    Longname options and their corresponding single char version\n        --reference \u003cfile\u003e                Same as -R\n        --classification \u003cfile\u003e           Same as -C\n        --gen-msg \u003cfile\u003e                  Same as -G\n        --sid-msg \u003cfile\u003e                  Same as -S\n        --alert-on-each-packet-in-stream  Call output plugins on each packet in an alert stream\n        --process-new-records-only        Same as -n\n        --pid-path \u003cdir\u003e                  Specify the directory for the barnyard2 PID file\n        --help                            Same as -?\n        --version                         Same as -V\n        --create-pidfile                  Create PID file, even when not in Daemon mode\n        --nolock-pidfile                  Do not try to lock barnyard2 PID file\n        --max-mpls-labelchain-len         Specify the max MPLS label chain\n        --mpls-payload-type               Specify the protocol (ipv4, ipv6, ethernet) that is encapsulated by MPLS\n\n\nExamples:\n\n  1. Using barnyard2 in continuous mode with a waldo file\n\n    # ./barnyard2 -c /etc/barnyard2.conf -d /var/snort -f snort.u2 -w /var/snort/snort.waldo\n\n  2. Using barnyard2 in batch mode\n\n    # ./barnyard2 -c /etc/barnyard2.conf -o file1.u2 file2.u2 file3.u2\n\n\n------------------------------------------------------------------------------\n4. CONTACT\n------------------------------------------------------------------------------\n\nYou can contact the barnyard2 team and user base for question/help debugging issue concerning barnyard2 by using our mailing lists.\n\nbarnyard2-users@googlegroups.com\nAND\nbarnyard2-devel@googlegroups.com\n\nYou can contact the barnyard2-hz (Hogzilla) team by our mailing list.\n\nhogzilla@googlegroups.com\n\n------------------------------------------------------------------------------\n5. DEBUG barnyard2-hz\n------------------------------------------------------------------------------\n\ngdb /usr/local/by-hz/bin/barnyard2\n\u003e set follow-fork-mode child\n\u003e r -c /usr/local/by-hz/etc/barnyard2.conf -a /usr/local/snort/var/log/archive -f merged.log -d /usr/local/snort/var/log\n\u003e bt\n\nYou may need to add somewhere a \"raise(SIGINT);\" to create a breakpoint.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmfurquimdev%2Fbarnyard_dogzilla","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmfurquimdev%2Fbarnyard_dogzilla","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmfurquimdev%2Fbarnyard_dogzilla/lists"}