Get in pfPorts barnyard2 to avoid having snort link against mysql libs. Maybe barnyard2 should be made a package of its own as extension to snort?