[Snort-users] Central Mysql Database

Christopher Cook crcook at ...6518...
Mon Aug 12 16:40:02 EDT 2002

Nope. :-)

ACID is able to pick up multiple Snort sensors.  It will store all the 
data in one database, but you are able to sort by information by sensors.

Chris Cook
Security and Support Specialist
Office of Information Technology
Oakland University

Dave Oswald wrote:

> I have 3 snort sensors deployed on my network and each is logging to 
> it's own mysql database, each server is also running PHP with Acid. 
> All of the sensors are stable at this point and working great but now 
> I want to log to a central mysql database, I have searched the mailing 
> list archives and checked the snort home page and done the google 
> search thing and I am unable to find documentation on the changes that 
> need to be done to accomplish this. I have already changed the 
> snort.conf file output database line to point to the central server, 
> is there any other confgiuration changes that need to be made ?
> ------------------------------------------------------------------------
> *Do You Yahoo!?*
> HotJobs, a Yahoo! service 
> <http://rd.yahoo.com/careers/mailsig/new/*http://www.hotjobs.com> - 
> Search Thousands of New Jobs

More information about the Snort-users mailing list