Snort mailing list archives

RE: mysql archive tool


From: "Estes, Matt CPR / FCBS" <Matt.Estes () eis army mil>
Date: Tue, 30 Apr 2002 14:25:43 -0400

You could use 
"mysqldump -p[password] snort > snort.[today's date]" 

and then the clean script.  I like mysqldump for recovery planning because
you can recreate the entire DB on a clean box with one command.  

Matt

-----Original Message-----
From: Roberto Suarez Soto [mailto:robe () alfa21 com]
Sent: Tuesday, April 30, 2002 11:28 AM
To: Snort-users () lists sourceforge net
Subject: Re: [Snort-users] mysql archive tool


On Apr/29, Jason Monroe wrote:

I was wondering is anyone in Perl or PHP or any other 
language has created a 
MySQL database backup utility something that will allow me 
to backup say the 
last 2 weeks of data save that to a file and compress the 
information. I 
found snort_cleandb v.1.7  but it doesn't have any of this kind of 
functionality.  

      What I do to backup data is, simply, save the snort logs :-) (in
tcpdump format). Everytime I want to rebuild the database, I 
just feed all the
logs to snort again with a script, and everything is fine 
again. It's not very
elegant, but works nicely and allows me to fire up a 
tcpdump/ethereal in case
I want to look closer to some data :-)

-- 
Roberto Suarez Soto                                   Alfa21 
Outsourcing
    robe () alfa21 com                                     
http://www.alfa21.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: