snort-inline-users

[Snort-inline-users] MYSQL help

[Mike S. <mik...@ch...>]

Hi, can anyone help me, I am trying to enable MYSQL support for version
2.6.1.5  , I'm not having much luck. I have configured --with-mysql  and
set the config file to log to MYSQL but nothing happens, the database
remains unpopulated.

thanks
Mike :)

Re: [Snort-inline-users] MYSQL help

[Will M. <wil...@gm...>]

First of all you don't really want to use snort_inline to log directly to a
MYSQL database from snort_inline.  If snort/snort_inline loses connection to
a database, the process terminates, which may be acceptable for passive
mode, but not ok for InlineMode();  Use barnyard + snort unified logging to
log to your database.

Regards,

Will

On 7/25/07, Mike Smith <mik...@ch...> wrote:
>
> Hi, can anyone help me, I am trying to enable MYSQL support for version
> 2.6.1.5  , I'm not having much luck. I have configured --with-mysql  and
> set the config file to log to MYSQL but nothing happens, the database
> remains unpopulated.
>
> thanks
> Mike :)
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >>  http://get.splunk.com/
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>
>
>

Re: [Snort-inline-users] MYSQL help

[Nick R. <ni...@ro...>]

> First of all you don't really want to use snort_inline to log directly
to
> a
> MYSQL database from snort_inline.  If snort/snort_inline loses
connection
> to
> a database, the process terminates, which may be acceptable for passive
mode, but not ok for InlineMode();  Use barnyard + snort unified logging
to
> log to your database.
>

  Also, adding the --with-mysql flag during build time does not create the
DB or setup the table structure.  I believe there is (or used to be) a
MYSQL readme file included in docs that describes how to setup your
database structure.



Nick Rogness <ni...@ro...>