RE: MySQL Configuration for Snort

["Schroeder, Eric" <Eric.Schroeder () westgroup com>]

I think MySQL defaults to MyISAM.  I installed phpMyAdmin to make the
administration easier.  After you add the schema, it tells you the table
types.
 
-Eric

-----Original Message-----
From: L. Christopher Luther [mailto:CLuther () Xybernaut com]
Sent: Monday, November 25, 2002 1:00 PM
To: 'Schroeder, Eric'
Cc: 'snort-users () lists sourceforge net'
Subject: RE: [Snort-users] MySQL Configuration for Snort
Sensitivity: Confidential



I've seen the "create_mysql" script, and I guess that I'm just not familiar
enough with the MySQL database to know if the Snort tables created by this
script are ISAM, InnoDB, or whatever.  

- Christopher  


-----Original Message----- 
From: Schroeder, Eric [ mailto:Eric.Schroeder () westgroup com
<mailto:Eric.Schroeder () westgroup com> ] 
Sent: Monday, November 25, 2002 1:47 PM 
To: 'L. Christopher Luther' 
Subject: RE: [Snort-users] MySQL Configuration for Snort 
Sensitivity: Confidential 


There is a "create_mysql" file in the contrib directory with the source RPM.
This has the schema that snort needs to log to MySQL.  Use it in a command
like "mysql -u user -p -d snortdatabase < create_mysql", just make sure that
"snortdatabase" exists first.

-Eric 


-----Original Message----- 
From: L. Christopher Luther [ mailto:CLuther () Xybernaut com
<mailto:CLuther () Xybernaut com> ] 
Sent: Monday, November 25, 2002 11:52 AM 
To: 'snort-users () lists sourceforge net' 
Subject: [Snort-users] MySQL Configuration for Snort 
Sensitivity: Confidential 


Can anyone tell me the configuration for MySQL to with Snort in the most
efficient manner?  I've read all the FAQs and docs, but do not see anything
that tells me which MySQL table format (e.g., MySQL ISAM (MyISAM), ISAM,
InnoDB, etc.) is best suited for Snort.  


Sincerely,  

L. Christopher Luther  
Technical Consultant  
Xybernaut Solutions, Inc.  
(703) 654-3642  
cluther () xybernaut com  
http://www.xybernautsolutions.com <http://www.xybernautsolutions.com>   

My PGP Public Key:  
http://keyserver.pgp.com/pks/lookup?op=get
<http://keyserver.pgp.com/pks/lookup?op=get&search=0x21261B88>
&search=0x21261B88 

CONFIDENTIALITY NOTE:  This communication contains 
information that is confidential and/or legally privileged.  
This information is intended only for the use of the individual 
or entity named on this communication. If you are not the 
intended recipient, you are hereby notified that any disclosure, 
copying, distribution, printing or other use of, or any action 
in reliance on, the contents of this communication is strictly 
prohibited.  If you receive this communication in error, please 
immediately notify us by telephone at (703) 631-6925. 

------------------------------------------------------------ 
Unsolicited commercial e-mail will automatically be reported 
to the appropriate abuse@ - without exception. 
------------------------------------------------------------