Snort mailing list archives

Dynamic Preprocessor Example doesn't log in Database


From: Thomas LESTRIEZ <thomas.lestriez () edf fr>
Date: Mon, 4 Apr 2011 10:06:42 +0200

Hello,

I am using Snort 2.9.0.3 in a Debian.

I can log in database thanks to the snort's classic rule system, like does 
my "test.rules" file contains a rule alerting when the port 200 is used in 
the network. So my Mysql database works and my snort.conf and 
barnyard2.conf seems to be well configured.

I installed and compiled the Dynamic Preprocessor Example of Snort. It 
works well, and I can see logs in the syslog file when the Dynamic 
Preprocessor Example matches the port I configured in snorf.conf (11123).

My problem is:  Only the dynamic preprocessor example doesn't log in Mysql 
database (It just logs in the syslog). The example use the 
"_dpd.addAlert(.......);  " function, but it seems it doesn't work for 
me...

Could you help me please?

Thank you.

PS: I tested with another dynamic prepreocessor, it doesn't log in 
database neither.

Regards,



  
 
Thomas LESTRIEZ
Apprenti Ingénieur
EDF - R&D
SINETICS
1, avenue du Général de Gaulle
BP 408
92141 Clamart Cedex
 
thomas.lestriez () edf fr
Tél. : 0147653811
  
Un geste simple pour l'environnement, n'imprimez ce message que si vous en 
avez l'utilité.



Ce message et toutes les pièces jointes (ci-après le 'Message') sont établis à l'intention exclusive des destinataires 
et les informations qui y figurent sont strictement confidentielles. Toute utilisation de ce Message non conforme à sa 
destination, toute diffusion ou toute publication totale ou partielle, est interdite sauf autorisation expresse.

Si vous n'êtes pas le destinataire de ce Message, il vous est interdit de le copier, de le faire suivre, de le 
divulguer ou d'en utiliser tout ou partie. Si vous avez reçu ce Message par erreur, merci de le supprimer de votre 
système, ainsi que toutes ses copies, et de n'en garder aucune trace sur quelque support que ce soit. Nous vous 
remercions également d'en avertir immédiatement l'expéditeur par retour du message.

Il est impossible de garantir que les communications par messagerie électronique arrivent en temps utile, sont 
sécurisées ou dénuées de toute erreur ou virus.
____________________________________________________

This message and any attachments (the 'Message') are intended solely for the addressees. The information contained in 
this Message is confidential. Any use of information contained in this Message not in accord with its purpose, any 
dissemination or disclosure, either whole or partial, is prohibited except formal approval.

If you are not the addressee, you may not copy, forward, disclose or use any part of it. If you have received this 
message in error, please delete it and all copies from your system and notify the sender immediately by return message.

E-mail communication cannot be guaranteed to be timely secure, error or virus-free.

------------------------------------------------------------------------------
Create and publish websites with WebMatrix
Use the most popular FREE web apps or write code yourself; 
WebMatrix provides all the features you need to develop and 
publish your website. http://p.sf.net/sfu/ms-webmatrix-sf
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Current thread: