Re: Snort and a remote mssql database server

["Michael Steele" <michaels () winsnort com>]

No MSSQL support for Snort. ODBC will also work to shift events to a MSSQL database, but no support for that.

 

All the database stuff has been shifted from Snort internal (which supported MySQL, PostgreSQL, MSSQL, ODBC, and 
Oracle) to Barnyard2 which only supports MySQL, and PostgreSQL. Inquires as to database support should be directed to 
the Barnyard2 users group.

 

If you look at the barnyard2.conf is clearly shows support for all the database options below.

#   output database: log, mysql, user=root password=test dbname=db host=localhost

#   output database: log, postgresql, user=root password=test dbname=db host=localhost

#   output database: log, odbc, user=snort dbname=snort

#   output database: log, mssql, dbname=snort user=snort password=test

#   output database: log, oracle, dbname=snort user=snort password=test

 

However the barnyard2.conf should be:

#   output database: log, mysql, user=root password=test dbname=db host=localhost

#   output database: log, postgresql, user=root password=test dbname=db host=localhost

 

There is NO support for inline on Windows.

 

Best regards,

Michael...

 

WINSNORT.com Management…

--

******************** Established ~ 2002 **********************

* FREE Windows Intrusion Detection System (WinIDS) Tutorials *

*            ~~ FREE Windows Support Forums ~~               *

*               Visit @  <http://winsnort.com/> http://winsnort.com                  *

*     Snort: Open Source Network IDS -  <http://snort.org/> http://snort.org      *

**************************************************************

 

From: Eugene Grama [mailto:eugene.grama () gmail com] 
Sent: Tuesday, February 17, 2015 6:07 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort and a remote mssql database server

 

Hello,

Can snort send its result to a remote mssql server?

If yes (and I really hope so), can you kindly please give me any link for guides/procedure on how to accomplish this. 

I can see there are issues with regarding to authentication of mssql and snort.



-- 

Thank you and Best regards,

 

Eugene

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!