rendered paste bodyFeb 8 16:07:16 repulse mysqld5: Starting MySQL: succeeded
Feb 8 11:09:53 repulse barnyard[5162]: ERROR: Unable to read data.
Feb 8 11:09:53 repulse barnyard[5162]: Cannot connect to localhost on TCP port 7738.
Feb 8 11:09:53 repulse barnyard[5162]: Waiting 15 secs to try again.
Feb 8 11:09:56 repulse runuser: ERROR: Directory /var/run does not exists or is not writable.
Feb 8 11:09:56 repulse runuser: Process ID will not be written to file.
Feb 8 11:09:56 repulse sguil_agent-horizon: sensor_agent.tcl startup succeeded
Feb 8 11:10:19 repulse barnyard[5337]: Initializing daemon mode
Feb 8 11:10:19 repulse runuser: Barnyard Version 0.2.0 (Build 32)
Feb 8 11:10:19 repulse barnyard-horizon: barnyard startup succeeded
Feb 8 11:10:19 repulse barnyard[5363]: Opened spool file '/var/log/snort-horizon/snort.log.1202467210'
Feb 8 11:10:19 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738.
Feb 8 11:10:19 repulse barnyard[5363]: Waiting 15 secs to try again.
Feb 8 11:10:20 repulse snort: OpenPcap() device bond0 network lookup: bond0: no IPv4 address assigned
Feb 8 11:10:20 repulse snort[5376]: Initializing daemon mode
Feb 8 11:10:20 repulse snort[5377]: PID path stat checked out ok, PID path set to /var/run/
Feb 8 11:10:20 repulse snort[5377]: Writing PID "5377" to file "/var/run//snort_bond0.pid"
Feb 8 11:10:20 repulse snort[5377]: Parsing Rules file /usr/local/snortrules-horizon/snort.conf
Feb 8 11:10:20 repulse snort[5377]: ,-----------[Flow Config]----------------------
Feb 8 11:10:20 repulse snort[5377]: | Stats Interval: 0
Feb 8 11:10:20 repulse snort[5377]: | Hash Method: 2
Feb 8 11:10:20 repulse snort[5377]: | Memcap: 10485760
Feb 8 11:10:20 repulse snort[5377]: | Rows : 4099
Feb 8 11:10:20 repulse snort[5377]: | Overhead Bytes: 16400(%0.16)
Feb 8 11:10:20 repulse snort[5377]: `----------------------------------------------
Feb 8 11:10:20 repulse snort-horizon: snort startup succeeded
Feb 8 11:10:20 repulse snort[5377]: Frag3 global config:
Feb 8 11:10:20 repulse snort[5377]: Max frags: 65536
Feb 8 11:10:20 repulse snort[5377]: Fragment memory cap: 4194304 bytes
Feb 8 11:10:20 repulse snort[5377]: Frag3 engine config:
Feb 8 11:10:20 repulse snort[5377]: Target-based policy: FIRST
Feb 8 11:10:20 repulse snort[5377]: Fragment timeout: 60 seconds
Feb 8 11:10:20 repulse snort[5377]: Fragment min_ttl: 1
Feb 8 11:10:20 repulse snort[5377]: Fragment ttl_limit: 5
Feb 8 11:10:20 repulse snort[5377]: Fragment Problems: 1
Feb 8 11:10:20 repulse snort[5377]: Bound Addresses: 0.0.0.0/0.0.0.0
Feb 8 11:10:20 repulse snort[5377]: Stream4 config:
Feb 8 11:10:20 repulse snort[5377]: Stateful inspection: ACTIVE
Feb 8 11:10:20 repulse snort[5377]: Session statistics: INACTIVE
NORMAL SGUIL SENSOR RESTART STUFF
Feb 8 11:10:23 repulse snort[5377]: | gen-id=1 sig-id=7525 type=Limit tracking=src count=1 seconds=300
Feb 8 11:10:23 repulse snort[5377]: | gen-id=1 sig-id=5944 type=Limit tracking=src count=1 seconds=900
Feb 8 11:10:23 repulse snort[5377]: | gen-id=1 sig-id=2500094 type=Limit tracking=src count=1 seconds=60
Feb 8 11:10:23 repulse snort[5377]: | gen-id=1 sig-id=2500047 type=Limit tracking=src count=1 seconds=60
Feb 8 11:10:23 repulse snort[5377]: | gen-id=1 sig-id=5852 type=Limit tracking=src count=1 seconds=600
Feb 8 11:10:23 repulse snort[5377]: +-----------------------[suppression]------------------------------------------
Feb 8 11:10:23 repulse snort[5377]: | none
Feb 8 11:10:23 repulse snort[5377]: -------------------------------------------------------------------------------
Feb 8 11:10:23 repulse snort[5377]: Rule application order: ->pass->activation->dynamic->alert->log->drop
Feb 8 11:10:23 repulse snort[5377]: Log directory = /var/log/snort-horizon
Feb 8 11:10:23 repulse sancp-horizon: sancp startup succeeded
Feb 8 11:10:28 repulse snort[5377]: Snort initialization completed successfully (pid=5377)
Feb 8 11:10:34 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738.
Feb 8 11:10:34 repulse barnyard[5363]: Waiting 15 secs to try again.
Feb 8 11:10:49 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738.
Feb 8 11:10:49 repulse barnyard[5363]: Waiting 15 secs to try again.
Feb 8 11:11:04 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738.
Feb 8 11:11:04 repulse barnyard[5363]: Waiting 15 secs to try again.
Feb 8 11:11:19 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738.
Feb 8 11:11:19 repulse barnyard[5363]: Waiting 15 secs to try again.
Feb 8 11:11:34 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738.
Feb 8 11:11:34 repulse barnyard[5363]: Waiting 15 secs to try again.