Snort mailing list archives
Generating reports from binary data ...
From: James Herschel <jherschel () quarry com>
Date: 12 Sep 2002 13:48:24 -0400
Hello, for performance reasons, I would like my Snort boxes to send their logging as binary to a centralized MySQL/ACID setup. Can ACID render binary logs to human readable text? My reason for asking is that although I think it would make more sense to have one IDS cover our web servers - the current ideology here is to have one snort install per webserver. Essentially putting an IDS on each web server. Logging as ASCII has proven to be too much of a performance burden. Any input would be appreciated! Thanks, James Herschel Systems Administrator www.quarry.com
Current thread:
- Generating reports from binary data ... James Herschel (Sep 12)