Re: loggin to mySQL

[Grant Parkinson <grantp () speakeasy net>]

> This is how I have loggin setup in my snort.conf:
> ruletype log2mySQL
> {
>   type log
>   output database: log, mysql, user=snort dbname=snort host=localhost
> }

Blake, 

You will need to associate rule(s) with your custom actions. 

ex:  log2mysql tcp any any -> $HOME_NET any (flags: S; msg: "Inbound
Connection";)

--
Grant
 



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users