RE: [Snort-devel] Mysql - Win32 and Control C

["Michael Steele" <michaels () silicondefense com>]

Paul,

As far as I know this does not work on Win32 but does on the .nix
machines. It would be great if something could be done to get these
stats. Once Snort is started with MySQL support you need to use task
manager to break the process.

You can do a Snort -v, CTRL/X. and receive the stats, but not while
MySQL is active.

Would be nice to pull these stats wile Snort was still running.

-Michael
-- 
 Michael Steele | system engineer     
 mailto:michaels () silicondefense com    
 Silicon Defense: IDS solutions - http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org


-----Original Message-----
From: snort-devel-admin () lists sourceforge net
[mailto:snort-devel-admin () lists sourceforge net] On Behalf Of Paul Poh
Sent: Tuesday, July 23, 2002 6:05 PM
To: Ian Macdonald
Cc: snort-devel () lists sourceforge net
Subject: Re: [Snort-devel] Mysql - Win32 and Control C

I might be misunderstanding the problem but aren't you suppose to send 
snort a SIGUSR1 signal (ie kill -SIGUSR1 snortpid) to get the stats.

Ian Macdonald wrote:
> I have been having an on going issue with being able to get stats
about
> dropped packets from snort while mysql logging was switched on. Today
I
> replaced the mysqlclient.lib that comes with snort with the version
that
> comes with a recent mysql db install, recompiled snort kicked off the
exe
> and then did a Cntl-c and wham I got the statistics and snort exited.
>
> I am guessing there is something in the version that comes with snort
that
> is trapping the Cntr-C and never passing it to snort.
>
> Perhaps we should update the version of myslclient.lib that comes with
snort
> Ian
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-devel





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users