Re: Snort logs to MySQL

["Joel Esler (jesler)" <jesler () cisco com>]

Waldo is 100% correct.  

--
Sent from my iPhone

> On Jan 28, 2017, at 1:52 PM, "wkitty42 () windstream net" <wkitty42 () windstream net> wrote:
>
> > On 01/27/2017 12:57 PM, Abdullah AL-Mutairy wrote:
> >
> > Hello everyone!
> >
> > I'm wondering why snort developers stopped supporting logging to SQL database
> > directly? I know i can use barnyard2 to log into SQL DB .. but isn't it better
> > if snort just logs to SQL directly?
>
> no... if the database is not available or there is a problem, snort would hang 
> waiting on the connection to clear and return... that hang lead to traffic being 
> missed... it is best if snort just write to its logs and let something else 
> worry about pharting about with some database mess ;)
>
>
> -- 
>  NOTE: No off-list assistance is given without prior approval.
>        *Please keep mailing list traffic on the list* unless
>        private contact is specifically requested and granted.
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!