Snort mailing list archives
Re: Database connection "Established" or Not?
From: Erek Adams <erek () snort org>
Date: Tue, 28 Jan 2003 16:44:24 -0500 (EST)
On Tue, 28 Jan 2003, Chris N wrote:
I notice that sometimes snort will dropped its connection between a remote sensor and the logging database.. At first I thought something was wrong, but then I noticed the connection sometimes reestablishes itself.. Snort remains running just the network connection is dropped, is this Normal? I created a restart script but I don't wont to use it if this is normal Snort behavior.
Yep, that's normal. Suggestion: Use Barnyard [0]. Note: It's not at a "production" level, but quite a few people use it in that respect. You won't get quite as much info as you do using the db output plugin, but it doesn't barf on lack of connectivity! :) Cheers! ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson [0] http://www.snort.org/dl/barnyard/ ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Database connection "Established" or Not? Chris N (Jan 28)
- Re: Database connection "Established" or Not? Erek Adams (Jan 28)
- <Possible follow-ups>
- RE: Database connection "Established" or Not? Kreimendahl, Chad J (Jan 28)