开发四年只会写业务代码,分布式高并发都不会还做程序员?->>>

运行环境: snort 2.9.6.2 + barnyard 2-2.1.9 + base 1.4.5 + mysql 5.5.10
系统:Centos 6.4
问题: 网上资料都说在snort.conf文件中修改为:
output unified2: filename snort.log, limit 128
但是这种方式我生成的文件时tcpdump格式的,barnyard2 无法读取到
snort.log.1414999410: tcpdump capture file (little-endian) - version 2.4 (Ethernet, capture length 1514)
Opened spool file '/var/log/snort/snort.log.1414999278' Closing spool file '/var/log/snort/snort.log.1414999278'. Read 0 records Opened spool file '/var/log/snort/snort.log.1414999339' Closing spool file '/var/log/snort/snort.log.1414999339'. Read 0 records Opened spool file '/var/log/snort/snort.log.1414999410'
步骤二:我将snort.conf文件中output 修改为:
output log_unified2: filename snort.log, limit 128
这种方式我生成的文件是data,barnyard2 可以读取到,但是就是无法写进mysql数据库
snort.log.1415000281: data
Closing spool file '/var/log/snort/snort.log.1415000281'. Read 64 records Opened spool file '/var/log/snort/snort.log.1415000499' Waiting for new data Closing spool file '/var/log/snort/snort.log.1415000499'. Read 12 records Opened spool file '/var/log/snort/snort.log.1415000516'
barnyard2.conf配置如下: output database: log, mysql, dbname=snort user=snort password=snort host=localhost
数据库中没有插入任何数据, 跪求解答啊 困扰我一个星期了