Snort on pfSense Router Not Sending Alerts to MySQL Database
I encountered a problem during the configuration of the Snort IDS with Barnyard2 where the alerts triggered by Snort were not being sent to the remote database configured to receive the alerts. I checked the configuration in and found it to be set to:
alert, mysql, user=user password=pass dbname=snorby host=IP
This however is incorrect, I needed to set it to the proper configuration:
output database: alert, mysql, user=user password=pass dbname=snorby host=IP
Once I set the proper configuration Barnyard2 began sending alerts to the remote MySQL database.