Snort mailing list archives

Generating reports from binary data ...


From: James Herschel <jherschel () quarry com>
Date: 12 Sep 2002 13:48:24 -0400

Hello, for performance reasons, I would like my Snort boxes to send
their logging as binary to a centralized MySQL/ACID setup.   Can ACID
render binary logs to human readable text? 

My reason for asking is that although I think it would make more sense
to have one IDS cover our web servers - the current ideology here is to
have one snort install per webserver. Essentially putting an IDS on each
web server.  Logging as ASCII has proven to be too much of a performance
burden. 

Any input would be appreciated! 

Thanks, 

James Herschel 
Systems Administrator 
www.quarry.com

Current thread: