Snort mailing list archives

Snort &postgresql (possibly stupid question department)


From: Mark Forsyth <forsythm () optushome com au>
Date: Mon, 22 Oct 2001 01:03:52 +1000


Hiya,
     Maybe I've lost the plot completely but.. Snort stores IP addresses ( 
Ip_src & ip_dst ) in the iphdr table as a bigint so a select of that table 
returns ...:-


snort=# select ip_src,ip_dst from iphdr;
   ip_src   |   ip_dst
------------+------------
 3587915298 | 3416531087
 3507146690 | 3416531087
 3507159138 | 3416531087

My question is how to do the conversion to the IPv4 (xxx.xxx.xxx.xxx) 
format ? Presumably I'm missing something obvious, in fact so obvious that 
I haven't a hope of seeing it ??

I used the script supplied in snort-1.8.1-RELEASE to create the database. 
(snort-1.8.1-RELEASE/contrib/create_postgresql)

TIA
Mark F...

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: