Snort mailing list archives
Re: Snort logs to MySQL
From: wkitty42 () windstream net
Date: Sat, 28 Jan 2017 13:51:13 -0500
On 01/27/2017 12:57 PM, Abdullah AL-Mutairy wrote:
Hello everyone! I'm wondering why snort developers stopped supporting logging to SQL database directly? I know i can use barnyard2 to log into SQL DB .. but isn't it better if snort just logs to SQL directly?
no... if the database is not available or there is a problem, snort would hang waiting on the connection to clear and return... that hang lead to traffic being missed... it is best if snort just write to its logs and let something else worry about pharting about with some database mess ;) -- NOTE: No off-list assistance is given without prior approval. *Please keep mailing list traffic on the list* unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Snort logs to MySQL Abdullah AL-Mutairy (Jan 27)
- Re: Snort logs to MySQL Al Lewis (allewi) (Jan 27)
- Re: Snort logs to MySQL wkitty42 (Jan 28)
- Re: Snort logs to MySQL Joel Esler (jesler) (Jan 28)
- Re: Snort logs to MySQL Abdullah AL-Mutairy (Jan 29)
- Re: Snort logs to MySQL Joel Esler (jesler) (Jan 29)
- Re: Snort logs to MySQL Joel Esler (jesler) (Jan 28)