Re: email notification scripts

[Edin Dizdarevic <edin.dizdarevic () interActive-Systems de>]

Hi Ryan,

why don't you log localy, let barnyard log to the database and
logsurfer be your real time warning system? Do it IMHO the right
way from the very begininng. Probably the best (performance) setup.
No need for ugly DB-queries, no dropped packets at high load since
Snort cannot analyze while logging (is this right?), no fear to loose
alerts and Snort if MySQL is down... Enough reasons? ;)

Ryan Ordway wrote:
>         I've recently moved from an alert logging based Snort system to a
[...]
> unfortunately.... maybe something to use as an example?
>
>         Thanks muchly,
>
>         Ryan

Regards,

Edin_

--
Edin Dizdarevic





-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users