I am trying to fix our installation of snort. It seems someone broke this a while back and I have been tasked with fixing it. I can start snort without and issues, but when I start barnyard I get the following in my logs:
Oct 28 13:33:48 stables barnyard: Initializing daemon mode
Oct 28 13:33:48 stables barnyard: Opened spool file '/var/log/snort/snort.log.
Oct 28 13:33:48 stables barnyard: FATAL ERROR: ERROR: No input plugin found for magic: a1b2c3d4
Oct 28 13:33:48 stables barnyard: Exiting
After doing some reading it seems I was trying to make barnyard read a pcap file, which I believe is wrong. I read this:
I made the necessary changes but I am still unable to start barnyard.
BTW, I am running my snort sensors and collector on RHEL5.