barnyard2-waldo
Describe the waldo bookmark for barnyard2
Code Status
This simple scripts provides a decoded output for the barnyard2 bookmark file (waldo file)
Installation
$> gem install barnyard2waldo
Usage
$> waldo
Barnyard spool: /var/log/snort/merged.log.1426175522
Record Idx: 119879
2015-03-12 11:52:02 -0400
Extended Help
$ waldo -h
Usage: waldo [OPTIONS]
-b, --bookmark [waldofile] Bookmark file
Default: /var/spool/barnyard.waldo
-z, --zulu Print Zulu time (utc)
Default: false
Options::
-h, --help Display this screen
Reference:
https://github.com/firnsy/barnyard2/blob/master/src/spooler.c