Snort mailing list archives

Fw: what changes are required to move from MySQL toMSSQL?


From: "Szilagyi Gergely" <szilagyi () direkt-kfki hu>
Date: Wed, 9 Jan 2002 11:18:18 +0100

 Since MSSQL support is in beta state as far as I know, you can achieve the
same thing with odbc. I use snort on a linux box logging into an MSSQL2000
server on Win2k. Because I couldn't find native odbc to MSSQL on linux, I
use openlink's software, which is free to use for 2 concurrent users in 4
concurrent connections. Most of the time it's not much, but for snort it's
more than enough even with many sensor boxes logging into a central MSSQL
database. The tricky part for me was the compiling of snort on linux to get
everything working, because MSSQL and MySQL have some differences eg: the
way MSSQL handles datetime format. So if you plan to try this out I can send
you the modifications I made. (not much because MSSQL support is already in
beta state so I needed only a few #define directives) And again: check out
http://www.openlinksw.com/.
 bye
    Gergely Szilagyi
    gergely () szilagyi org

----- Original Message -----
From: "skadhi" <skadhi () ib-group com>
To: "loveshinobi" <loveshinobi () yahoo com>
Cc: <snort-users () lists sourceforge net>
Sent: Tuesday, January 08, 2002 5:25 PM
Subject: Re: [Snort-users] what changes are required to move from MySQL
toMSSQL?


On Mon, 2002-01-07 at 09:02, loveshinobi wrote:
hi all,

i got a question which i hope someone can help me with it

i have successfully setup a Snort sensor on a RH machine to connect to
a
remote MySQL database. now, i need to use MSSQL instead of MySQl (boss
preference...)

question is what are the changes do i need to make? is it just a
simple
matter of changing the DB plug-in to point to the MSSQL? or are there
any
other changes to be done?
that + loading the snort DB schema in the mssql db


--
/Saad Kadhi --  [skadhi () ib-group com]
[pgp keyid: 35592A6D http://pgp.mit.edu]
# buy a geek-in-a-can, point nozzle at technical problem and spray
# if desesperate degauss your screen. it might solve your pb as well


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: