RE: MySQL Configuration for Snort

["L. Christopher Luther" <CLuther () Xybernaut com>]

I've seen the "create_mysql" script, and I guess that I'm just not familiar
enough with the MySQL database to know if the Snort tables created by this
script are ISAM, InnoDB, or whatever.  

- Christopher  


-----Original Message-----
From: Schroeder, Eric [mailto:Eric.Schroeder () westgroup com]
Sent: Monday, November 25, 2002 1:47 PM
To: 'L. Christopher Luther'
Subject: RE: [Snort-users] MySQL Configuration for Snort
Sensitivity: Confidential


There is a "create_mysql" file in the contrib directory with the source RPM.
This has the schema that snort needs to log to MySQL.  Use it in a command
like "mysql -u user -p -d snortdatabase < create_mysql", just make sure that
"snortdatabase" exists first.

-Eric


-----Original Message-----
From: L. Christopher Luther [mailto:CLuther () Xybernaut com]
Sent: Monday, November 25, 2002 11:52 AM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] MySQL Configuration for Snort
Sensitivity: Confidential


Can anyone tell me the configuration for MySQL to with Snort in the most
efficient manner?  I've read all the FAQs and docs, but do not see anything
that tells me which MySQL table format (e.g., MySQL ISAM (MyISAM), ISAM,
InnoDB, etc.) is best suited for Snort.  


Sincerely,  

L. Christopher Luther  
Technical Consultant  
Xybernaut Solutions, Inc.  
(703) 654-3642  
cluther () xybernaut com  
http://www.xybernautsolutions.com  

My PGP Public Key:  
http://keyserver.pgp.com/pks/lookup?op=get&search=0x21261B88 

CONFIDENTIALITY NOTE:  This communication contains 
information that is confidential and/or legally privileged.  
This information is intended only for the use of the individual 
or entity named on this communication. If you are not the 
intended recipient, you are hereby notified that any disclosure, 
copying, distribution, printing or other use of, or any action 
in reliance on, the contents of this communication is strictly 
prohibited.  If you receive this communication in error, please 
immediately notify us by telephone at (703) 631-6925. 

------------------------------------------------------------ 
Unsolicited commercial e-mail will automatically be reported 
to the appropriate abuse@ - without exception. 
------------------------------------------------------------