Snort mailing list archives
Re: Re: [Snort-users] Can snort send alerts to the mysql database without writing an output file?
From: "Nerijus Krukauskas" <nkrukauskas () gmail com>
Date: Thu, 9 Mar 2006 13:46:57 +0200
On 09/03/06, Dirk Geschke <Dirk_Geschke () genua de> wrote:
Hi Nerijus,Well, yeah! This is bug in snort, but seems that this doesn't bother devs. Read this once more - more carefully: https://marc.theaimsgroup.com/?l=snort-users&m=114177073012250&w=2'-K none' and appropriate config line for db (_only_) in snort.conf'-K none' does only affect logging, not the alerts...
In my snort.conf I have only one output plugin configured. And that is database. On a command line I have: 'snort -K none -o -e -c <my_snort.conf_with_only_db_output_plugin> -X -d -y -D -i <interface_to_sniff>'. This combination works like charm. I have an empty /var/log/snort dir and alerts go right into the database. Isn't this what the OP wanted? (Can't figure it out now, cause the whole thread is messed all around my gmail.) Snort version is 2.4.3 (if that matters) running on linux.
BTW: This is the same as option '-N'.
Yes, '-N' == '-K none'.
Your turn: http://www.theadamsfamily.net/~erek/snort/drinking_game.txtYou spent the drinks? Fine, when and where?
Only for you, Dirk. And only if you come to my city. :) Deal? :) -- http://nk99.org/ ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: [Snort-users] Can snort send alerts to the mysql database without writing an output file? aktivists (Mar 08)
- Re: Re: [Snort-users] Can snort send alerts to the mysql database without writing an output file? Nerijus Krukauskas (Mar 09)
- Re: Re: [Snort-users] Can snort send alerts to the mysql database without writing an output file? Dirk Geschke (Mar 09)
- Re: Re: [Snort-users] Can snort send alerts to the mysql database without writing an output file? Nerijus Krukauskas (Mar 09)
- Re: Re: [Snort-users] Can snort send alerts to the mysql database without writing an output file? Dirk Geschke (Mar 09)
- Re: Re: [Snort-users] Can snort send alerts to the mysql database without writing an output file? Dirk Geschke (Mar 09)
- Re: Re: [Snort-users] Can snort send alerts to the mysql database without writing an output file? Nerijus Krukauskas (Mar 09)