Re: Snort logs to MySQL

[wkitty42 () windstream net]

On 01/27/2017 12:57 PM, Abdullah AL-Mutairy wrote:
> Hello everyone!
>
> I'm wondering why snort developers stopped supporting logging to SQL database
> directly? I know i can use barnyard2 to log into SQL DB .. but isn't it better
> if snort just logs to SQL directly?

no... if the database is not available or there is a problem, snort would hang 
waiting on the connection to clear and return... that hang lead to traffic being 
missed... it is best if snort just write to its logs and let something else 
worry about pharting about with some database mess ;)


-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!