Snort mailing list archives

Re: snort output database bind address?


From: Joel Esler <jesler () sourcefire com>
Date: Thu, 27 May 2010 21:08:48 -0400

No Lawrence, I don't think there is. The preferred method would be to output in unified output method and use another tool like barnyard2 to read the unified and input into the database.

--
Joel Esler
Sent from my iPhone

On May 27, 2010, at 5:49 PM, "Lawrence R. Hughes, Sr." <lhughes () safemedia com > wrote:

Hi,

Is there anyway to tell snort to bind to a local IP Address for it's connection to a remote mysql server like:

output database: alert, mysql, bind-address=65.15.34.165 user=snort password=xxxxxxx dbname=snort host=x.x.x.x sensor_name=snort55

Good old linux grabs the first NIC that has an IP address!

Thanks,
Larry

--- --- --- ---------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: