barnyard2-waldo

Describe the waldo bookmark for barnyard2

Code Status

This simple scripts provides a decoded output for the barnyard2 bookmark file (waldo file)

Installation

$> gem install barnyard2waldo

Usage

$> waldo
Barnyard spool: /var/log/snort/merged.log.1426175522
Record Idx: 119879
2015-03-12 11:52:02 -0400

Extended Help

$ waldo -h
Usage: waldo [OPTIONS]
    -b, --bookmark [waldofile]       Bookmark file
                                       Default: /var/spool/barnyard.waldo
    -z, --zulu                       Print Zulu time (utc)
                                       Default: false
Options::
    -h, --help                       Display this screen

Reference:

https://github.com/firnsy/barnyard2/blob/master/src/spooler.c