Snort mailing list archives

Re: Barnyard2 MySQL clarification - snortdb-extra tables


From: "Michael Steele" <michaels () winsnort com>
Date: Fri, 16 Mar 2018 07:56:08 -0400

I’m not finding the snortdb.extra.zip file anywhere?

 

Kindest regards,

Michael...

 

 

From: Maxime Vaudouer <maxime.vaudouer () outlook com> 
Sent: Thursday, March 15, 2018 9:17 AM
To: Michael Steele <michaels () winsnort com>
Subject: RE: [Snort-users] Barnyard2 MySQL clarification - snortdb-extra
tables

 

Hi,


Please here : 

https://books.google.com/books?id=1WKrLbh23LAC
<https://books.google.com/books?id=1WKrLbh23LAC&pg=PA167&lpg=PA167&dq=snortd
b-extra&source=bl&ots=5q33-6UJbz&sig=CNINzeHczS4kpoAqLSBoV6pRUs8&hl=fr&sa=X&
ved=0ahUKEwjrxOXQtO7ZAhWEXRQKHfUkAdkQ6AEIPDAD#v=onepage&q=snortdb-extra&f=fa
lse>
&pg=PA167&lpg=PA167&dq=snortdb-extra&source=bl&ots=5q33-6UJbz&sig=CNINzeHczS
4kpoAqLSBoV6pRUs8&hl=fr&sa=X&ved=0ahUKEwjrxOXQtO7ZAhWEXRQKHfUkAdkQ6AEIPDAD#v
=onepage&q=snortdb-extra&f=false

 

  _____  

De : Snort-users <snort-users-bounces () lists snort org
<mailto:snort-users-bounces () lists snort org> > de la part de Michael Steele
<michaels () winsnort com <mailto:michaels () winsnort com> >
Envoyé : mercredi 14 mars 2018 18:13
À : snort-users () lists snort org <mailto:snort-users () lists snort org> 
Objet : [Snort-users] Barnyard2 MySQL clarification - snortdb-extra tables 

 

It’s been a long time since I looked at the actual schema file from
Barnyard2 for MySQL. I notice at the bottom of the it refers to another
schema file called snortdb-extras.

 

Is this still relevant, and if so where exactly can the file be found?

 

# be sure to also use the snortdb-extra tables if you want

# mappings for tcp flags, protocols, and ports

 

Thanks…

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Current thread: