Snort mailing list archives
Re: problem with using snort to log in MS SQL server on another machine
From: Joel Esler <jesler () sourcefire com>
Date: Tue, 14 Aug 2012 11:19:04 -0400
On Aug 13, 2012, at 10:21 PM, waldo kitty <wkitty42 () windstream net> wrote:
On 8/9/2012 08:20, Asieh Mokarian wrote:Hi, I want to compile an instance of snort on a linux based system, but I want to compile it to log packets on a MS-SQL server on a remote machine which isi suspect that you cannot do this any more... direct logging to databases has been (or will be) removed…
has been. Removed in 2.9.3.0
the apparent way to do this now is to feed snort's output to barnyard2... AFAICT, the biggest and main achievement of this change is to enable snort to operate more on the goal of sniffing the traffic while not loosing any (or as much) and snort not having to deal with talking to some database server that may or may not be online or fast enough to accept everything that snort may be outputting…
It is also to remove code that we don't regression test against. We don't test it, we don't update it, and we don't know if it's working. Better to let people that primarily deal with that (barnyard2 guys). -- Joel Esler Senior Research Engineer, VRT OpenSource Community Manager Sourcefire ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- problem with using snort to log in MS SQL server on another machine Asieh Mokarian (Aug 13)
- Re: problem with using snort to log in MS SQL server on another machine waldo kitty (Aug 13)
- Re: problem with using snort to log in MS SQL server on another machine Michael Steele (Aug 14)
- Re: problem with using snort to log in MS SQL server on another machine Joel Esler (Aug 14)
- Re: problem with using snort to log in MS SQL server on another machine waldo kitty (Aug 13)