[Snort-devel] No logging to mysql in snort 2.4.x
Dirk_Geschke at ...802...
Fri Feb 3 07:56:01 EST 2006
> My question is why snort 2.4 doesn't work when there's no problems with 2.3.
are you really sure about this? If the connection to the database is
interrupted you have to re-connect. This is never done in the database
output plugin. The connect to the dabase is done on startup of snort,
never ever later again.
Use 2.3.3 again, kill the database, wait for some alerts and restart the
database without touching snort and see if there arrive any new alerts...
This is one of the reasons why you should not use the database output
plugin, there are better solutions available.
More information about the Snort-devel