Re: Snort Sensors + logging to MSSQL

[Erick Mechler <emechler () techometer net>]

:: I have edited the snort.conf file to enable the necessary changes to log
:: to the MSSQL server.

:: The SQL database has been configured and the necessary database had been 
:: created.

:: Do i need to run/enable anything else in order to log to the SQL server?

Nope.  In very simplistic terms:

  1. Configure snort to log to MySQL
  2. Configure your DB with the proper snort DB schema
  3. Give the "snort" user (whatever you may chose to call it) permissions 
     to write to the snort DB you configured in #2.
  4. Let 'er rip.

If you're asking why your setup doesn't work the way you expect, we're 
going to need a bit more information to go on :)

Cheers - Erick


-------------------------------------------------------
This SF.NET email is sponsored by: A Thawte Code Signing Certificate 
is essential in establishing user confidence by providing assurance of 
authenticity and code integrity. Download our Free Code Signing guide:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0028en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users