[Snort-users] Logging Snort to remote mySQL DB

shawn . moyer shawn at ...1184...
Mon Apr 2 12:01:50 EDT 2001


You could probably get away with building on one box and copy
libmysqlcient.so to the proper path on each box.



--shawn


Chad Gough wrote:
> 
> I have Snort 1.7 logging to MySQL and ACID working just fine on 1
> sensor (RedHat 7).  I have other snort sensors on the network and
> currently I'm using snarf to view the logs.  I would like to switch
> these over to log to MySQL over the network.
> 
> I am getting errors compiling Snort using the --with-mysql option.
> 
> Is it necessary to have MySQL installed on every box or is there a
> work around??  I would like to create all the sensors with OpenBSD
> and snort (trying to avoid installing mysql everywhere).
> 
> Thanks in advance,
> Chad
> 
> P.S. Does anyone have any stats as to the size of MySQL with regards
> to number of alerts in a DB??  Also, is there a bandwith concern
> logging directly to MySQL over a network?
> 
> __________________________________________________
> Do You Yahoo!?
> Get email at your own domain with Yahoo! Mail.
> http://personal.mail.yahoo.com/?.refer=text
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-- 

s h a w n   m o y e r
shawn at ...1184...

"Nuclear war would really set back cable."
	                     -- Ted Turner




More information about the Snort-users mailing list