Re: Snort Alert Mysql Query

[Rob MacGregor <rob.macgregor () gmail com>]

On Sun, Feb 14, 2016 at 5:35 PM adonis okpidi <adonisokpidi () gmail com>
wrote:

> Hi.
>
> I used Barnyard2 to read the snort.log file into MySQL database

Then you also need to join on the "cid" values as well as "sid" values. The
"sid" value is the sensor identifier, "cid" for the event (on that sensor).
-- 
Rob MacGregor
      Whoever fights monsters should see to it that in the process he
        doesn't become a monster.                  Friedrich Nietzsche

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!