Snort mailing list archives

RE: logging when the connection to MySQL is lost


From: Steve Halligan <giermo () geeksquad com>
Date: Thu, 10 Oct 2002 10:36:01 -0500

Snort goes *BOOM*

However, if you log to unified and use Barnyard to log to the DB (Which you
should be doing), Barnyard will "spin" until the db server comes back
online.  At least for MySQL it will.

-steve

Hello,
simple question, what happens when I configure snort to use the
database-output for mySQL and the connection to the 
mySQL-Server is lost, becauseof :
a) when logging local mySQL crashes 
b) when logging over a network a problem with the network occurs
c) when using stunnel to encrypt the traffic between snort an 
mySQL stunnel
crashes

Are these alerts lost or are they stored somewhere local on the
snort-sensor?

Regards
Hubert




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: