[Snort-inline-users] Snort_inline database logging problems

[Pawel C. <pc...@ui...>]

Hey all,
I have a following problem with running snort_inline with the mySQL
database: snort_inline correctly logs ip addresses, packet tcp dump, port
numbers, etc. except the time stamp that is not entered. We are running both
snort_inline and snort on the Honeywall and both log to two different
databases (snort and snort_inline). We are using ACID to 'read' the data
from the database. The packets logged by snort do contain the time stamps
(latest snort 2.1.0 Build 9), whereas packets logged by snort_inline (2.1.0
Build a) log everything except the time stamps. Does anyone have an answer
to this.

Pawel Czarnota
ACM Honeynet Project
http://www.cs.uic.edu/~pczarno1