Snort mailing list archives
RE: RE: Remote Mysql
From: "Snort" <Snort () InterCept Net>
Date: Fri, 18 Mar 2005 09:35:27 -0500
You just need the mysql libs, so yes, compile snort with the -mysql and it will find the mysql libs if you have them in the default location. Otherwise you may have to specify the location. As a suggestion, to be a little bit more secure, I would run stunnel between the 2 devices and let mysql run on top of that. Thanks, Michael Brown _____ From: Salil D. [mailto:salildumbre () rediffmail com] Posted At: Friday, March 18, 2005 12:27 AM Posted To: Snort Conversation: RE: [Snort-users] Remote Mysql Subject: Re: RE: [Snort-users] Remote Mysql Hello Michael, I am installing snort on proxy and mysql on other host I probably need mysql client to run on the snort host any ideas ? Regards, Salil D. On Fri, 18 Mar 2005 Snort wrote :
Not necessary if you already have mysql compiled in, just change it
from
localhost to the remote host IP address output database: alert, mysql, user=unhuh dbname=IDS sensor_name=pffft sid=11 password=freewilly host=10.0.0.1 Thanks, Michael Brown _____ From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Salil D. Posted At: Thursday, March 17, 2005 7:39 AM Posted To: Snort Conversation: [Snort-users] Remote Mysql Subject: [Snort-users] Remote Mysql Hello there, I was able to run snort with mysql both on same host I want to configure snort with mysql on remote machine what should be used with ./configure --with-mysql=????????? Thanks to all Salil. <http://clients.rediff.com/signature/track_sig.asp>
<http://clients.rediff.com/signature/track_sig.asp>
Current thread:
- Remote Mysql Salil D. (Mar 17)
- Re: Remote Mysql Jose Maria Lopez Hernandez (Mar 17)
- <Possible follow-ups>
- RE: Remote Mysql Snort (Mar 17)
- RE: RE: Remote Mysql Snort (Mar 18)
- RE: RE: RE: Remote Mysql Snort (Mar 21)