[Snort-users] barnyard to db

Andrew R. Baker andrewb0x29a at ...131...
Mon Oct 1 16:40:05 EDT 2001

--- Mike Poor <sp0re at ...1708...> wrote:
> is there any db support through barnyard?   I read the documentation, 
> and other than through the traditional snort output to MYSQL
> and other  unixodbc outputs, there was no mention of 
> db output from barnyard.

there are not currently any database output plugins available in barnyard.
 I have contemplated porting Jed's database output plugin over to
barnyard, but there are other things that need to be completed first.

> I noticed that in the lecture you gave at IO Wargames, 
> you were mentioning 20,000 writes per 
> second though barnyard, compared to +-800 with MYSQL output
> plugin from snort, and was wondering if that was to a 
> database, and if so, which one?  Is this something for the future?

The benchmark mentioned was obtained using a high speed embedded database.
 I will let Marty talk more about that if he wants to.


More information about the Snort-users mailing list