Snort mailing list archives
Re: Central Mysql Database
From: Stefan Schleifer <stefan.schleifer () linbit com>
Date: Tue, 13 Aug 2002 10:57:17 +0200
there is a quite usefull howto about multiple snort sensors at http://www.infis.univ.trieste.it/~lcars/ids/ stefan. Christopher Cook wrote:
Nope. :-)ACID is able to pick up multiple Snort sensors. It will store all the data in one database, but you are able to sort by information by sensors.Chris Cook Security and Support Specialist Office of Information Technology Oakland University Dave Oswald wrote:I have 3 snort sensors deployed on my network and each is logging to it's own mysql database, each server is also running PHP with Acid. All of the sensors are stable at this point and working great but now I want to log to a central mysql database, I have searched the mailing list archives and checked the snort home page and done the google search thing and I am unable to find documentation on the changes that need to be done to accomplish this. I have already changed the snort.conf file output database line to point to the central server, is there any other confgiuration changes that need to be made ?------------------------------------------------------------------------ *Do You Yahoo!?*HotJobs, a Yahoo! service <http://rd.yahoo.com/careers/mailsig/new/*http://www.hotjobs.com> - Search Thousands of New Jobs------------------------------------------------------- This sf.net email is sponsored by: Dice - The leading online job board for high-tech professionals. Search and apply for tech jobs today! http://seeker.dice.com/seeker.epl?rel_code=31 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- : Stefan Schleifer Tel +43-1-8974897-754 : : LINBIT Information Technologies GmbH Fax +43-1-8974897-111 : : Sechshauserstr 48, A-1150 Vienna/Europe http://www.linbit.com : ------------------------------------------------------- This sf.net email is sponsored by: Dice - The leading online job board for high-tech professionals. Search and apply for tech jobs today! http://seeker.dice.com/seeker.epl?rel_code=31 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Central Mysql Database Dave Oswald (Aug 12)
- Re: Central Mysql Database Christopher Cook (Aug 12)
- Re: Central Mysql Database Stefan Schleifer (Aug 13)
- Re: Central Mysql Database Christopher Cook (Aug 12)