Output spool reader for Snort
This program decouples output overhead from the Snort
network intrusion detection system and allows Snort to run at full speed.
It takes input and output plugins and can therefore be used to convert almost any spooled file.
Barnyard is a output system for Snort
. Snort creates a special binary output format called "unified." Barnyard reads this file, and then resends the data to a database back-end. Unlike the database output plugin, Barnyard manages the sending of events to the database and stores them when the database temporarily cannot accept connections.