Feb 8 16:07:16 repulse mysqld5: Starting MySQL: succeeded Feb 8 11:09:53 repulse barnyard[5162]: ERROR: Unable to read data. Feb 8 11:09:53 repulse barnyard[5162]: Cannot connect to localhost on TCP port 7738. Feb 8 11:09:53 repulse barnyard[5162]: Waiting 15 secs to try again. Feb 8 11:09:56 repulse runuser: ERROR: Directory /var/run does not exists or is not writable. Feb 8 11:09:56 repulse runuser: Process ID will not be written to file. Feb 8 11:09:56 repulse sguil_agent-horizon: sensor_agent.tcl startup succeeded Feb 8 11:10:19 repulse barnyard[5337]: Initializing daemon mode Feb 8 11:10:19 repulse runuser: Barnyard Version 0.2.0 (Build 32) Feb 8 11:10:19 repulse barnyard-horizon: barnyard startup succeeded Feb 8 11:10:19 repulse barnyard[5363]: Opened spool file '/var/log/snort-horizon/snort.log.1202467210' Feb 8 11:10:19 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738. Feb 8 11:10:19 repulse barnyard[5363]: Waiting 15 secs to try again. Feb 8 11:10:20 repulse snort: OpenPcap() device bond0 network lookup: bond0: no IPv4 address assigned Feb 8 11:10:20 repulse snort[5376]: Initializing daemon mode Feb 8 11:10:20 repulse snort[5377]: PID path stat checked out ok, PID path set to /var/run/ Feb 8 11:10:20 repulse snort[5377]: Writing PID "5377" to file "/var/run//snort_bond0.pid" Feb 8 11:10:20 repulse snort[5377]: Parsing Rules file /usr/local/snortrules-horizon/snort.conf Feb 8 11:10:20 repulse snort[5377]: ,-----------[Flow Config]---------------------- Feb 8 11:10:20 repulse snort[5377]: | Stats Interval: 0 Feb 8 11:10:20 repulse snort[5377]: | Hash Method: 2 Feb 8 11:10:20 repulse snort[5377]: | Memcap: 10485760 Feb 8 11:10:20 repulse snort[5377]: | Rows : 4099 Feb 8 11:10:20 repulse snort[5377]: | Overhead Bytes: 16400(%0.16) Feb 8 11:10:20 repulse snort[5377]: `---------------------------------------------- Feb 8 11:10:20 repulse snort-horizon: snort startup succeeded Feb 8 11:10:20 repulse snort[5377]: Frag3 global config: Feb 8 11:10:20 repulse snort[5377]: Max frags: 65536 Feb 8 11:10:20 repulse snort[5377]: Fragment memory cap: 4194304 bytes Feb 8 11:10:20 repulse snort[5377]: Frag3 engine config: Feb 8 11:10:20 repulse snort[5377]: Target-based policy: FIRST Feb 8 11:10:20 repulse snort[5377]: Fragment timeout: 60 seconds Feb 8 11:10:20 repulse snort[5377]: Fragment min_ttl: 1 Feb 8 11:10:20 repulse snort[5377]: Fragment ttl_limit: 5 Feb 8 11:10:20 repulse snort[5377]: Fragment Problems: 1 Feb 8 11:10:20 repulse snort[5377]: Bound Addresses: 0.0.0.0/0.0.0.0 Feb 8 11:10:20 repulse snort[5377]: Stream4 config: Feb 8 11:10:20 repulse snort[5377]: Stateful inspection: ACTIVE Feb 8 11:10:20 repulse snort[5377]: Session statistics: INACTIVE NORMAL SGUIL SENSOR RESTART STUFF Feb 8 11:10:23 repulse snort[5377]: | gen-id=1 sig-id=7525 type=Limit tracking=src count=1 seconds=300 Feb 8 11:10:23 repulse snort[5377]: | gen-id=1 sig-id=5944 type=Limit tracking=src count=1 seconds=900 Feb 8 11:10:23 repulse snort[5377]: | gen-id=1 sig-id=2500094 type=Limit tracking=src count=1 seconds=60 Feb 8 11:10:23 repulse snort[5377]: | gen-id=1 sig-id=2500047 type=Limit tracking=src count=1 seconds=60 Feb 8 11:10:23 repulse snort[5377]: | gen-id=1 sig-id=5852 type=Limit tracking=src count=1 seconds=600 Feb 8 11:10:23 repulse snort[5377]: +-----------------------[suppression]------------------------------------------ Feb 8 11:10:23 repulse snort[5377]: | none Feb 8 11:10:23 repulse snort[5377]: ------------------------------------------------------------------------------- Feb 8 11:10:23 repulse snort[5377]: Rule application order: ->pass->activation->dynamic->alert->log->drop Feb 8 11:10:23 repulse snort[5377]: Log directory = /var/log/snort-horizon Feb 8 11:10:23 repulse sancp-horizon: sancp startup succeeded Feb 8 11:10:28 repulse snort[5377]: Snort initialization completed successfully (pid=5377) Feb 8 11:10:34 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738. Feb 8 11:10:34 repulse barnyard[5363]: Waiting 15 secs to try again. Feb 8 11:10:49 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738. Feb 8 11:10:49 repulse barnyard[5363]: Waiting 15 secs to try again. Feb 8 11:11:04 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738. Feb 8 11:11:04 repulse barnyard[5363]: Waiting 15 secs to try again. Feb 8 11:11:19 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738. Feb 8 11:11:19 repulse barnyard[5363]: Waiting 15 secs to try again. Feb 8 11:11:34 repulse barnyard[5363]: Cannot connect to localhost on TCP port 7738. Feb 8 11:11:34 repulse barnyard[5363]: Waiting 15 secs to try again.