[Snort-devel] No logging to mysql in snort 2.4.x

Dirk Geschke Dirk_Geschke at ...802...
Fri Feb 3 07:56:01 EST 2006


Hi Martin,

> My question is why snort 2.4 doesn't work when there's no problems with 2.3.

are you really sure about this? If the connection to the database is 
interrupted you have to re-connect. This is never done in the database
output plugin. The connect to the dabase is done on startup of snort,
never ever later again.

Use 2.3.3 again, kill the database, wait for some alerts and restart the 
database without touching snort and see if there arrive any new alerts...

This is one of the reasons why you should not use the database output
plugin, there are better solutions available.

Best regards

Dirk





More information about the Snort-devel mailing list