snort and mssql

["Stephen Shepherd" <StephenShepherd () tac-denver com>]

Yes several of us are logging to MSSQL.  You should be able to find the
binaries you need on http://www.silicondefense.com/   The setup is
similar to the MYSQL install so review that documentation.  Here are my
brief notes:

1.) Have SQL installed and running either local or on another box.

2.) Create a DB called snort on the SQL server

3.) Use the sql script mssql.conf that comes with the Win32
distribution.

This is a text file with TSQL statements for creating the tables. You
can

run this in many different ways, but I used SQL Query analyzer tool

4.) Create a User for the snort DB and make sure it has enough rights to

add/updated the DB. I just made my snortuser DBO for the snort DB.

5.) The machine that is running Snort will need the MS SQL client
installed.

Install this by running SQL Server setup on the workstation and
selecting

the client tools install.

6.) Configure the DB plug-in line in snort.conf to point to the right DB

server and give it the appropriate credentials.




Message: 13
Date: Sat, 16 Feb 2002 22:34:46 -0800
From: Gongya Yu <yu () gongya net>
To: snort-users () lists sourceforge net
Subject: [Snort-users] snort and mssql

Anyone knows if it is possible to make snort log into mssql ?

thanks !!!

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users