Snort mailing list archives

Re: (Snort-users) Compiling mysql support for remote databas


From: "Neil" <neil_h () hk psi net>
Date: Mon, 3 Dec 2001 15:41:49 +0800

Dear All,

Just to say I gave it a go and it worked, so thanks for help with this one.

Appreciate it,

Neil

----- Original Message -----
From: <sandro.poppi () wacker com>
To: <neil_h () hk psi net>; <snort-users () lists sourceforge net>
Sent: Thursday, November 29, 2001 4:49 PM
Subject: AW: (Snort-users) Compiling mysql support for remote databas


Morning Neil,
Sorry if this is elementary/been asked before (I had a search
but found =
nothing on it).

I'm compiling snort on Solaris and I want to direct the
alerts (via the =
snort.conf file) to a remote mysql database on a Win98 machine.

I see that I need to include the option '--with-mysql=3DDIR' at the =
configure stage, but I'm not sure what to do about the 'DIR'
bit here, =
as the database won't be local.

The optin --with-mysql is used to set the path to the mysql header files
for
compilation. You could try to use the option without any directory (this
has
worked on linux for me) or set it to the directory where mysql.h resides
in
(e.g. /usr/include/mysql on linux). Of course the mysql development
package has
to be installed ;)

This has to be done regardless where the database resides, either local or
remote.

Is it possible to specify the remote mysql database at this
stage,

No this is done via snort.conf.

or is =
there some way to compile with mysql support added, so I can
redirect =
the output with the conf file later?

Yep, take a look on the example snort.conf shiped with the snort package.

HTH,
Sandro



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: