PBI package for Snort does not properly configure the barnyard2 support binary
Testing with Snort package on current 2.2 Alpha release shows the barnyard2 program is not properly installed/linked during the Snort PBI package installation. The Snort binary runs fine, but barnyard2 will not start when output logging to barnyard is enabled. There is no symlink for the barnyard2 binary in /usr/local/bin as there is for the snort binary. Something is not being correctly picked up in the PBI build process, and the resulting package does not correctly install barnyard2. Additionally, when trying to directly launch the barnyard2 binary that does get installed in /usr/pbi/snort-amd64/local/bin results in a failure to locate one of the MySQL shared libraries.
I have not tested Suricata yet, but I suspect the same issue exists within that package as well.