[Snort-users] Snort and MySql, Postgresql

Hutchinson, Andrew Andrew.Hutchinson at ...3639...
Fri Sep 20 07:23:03 EDT 2002


Neither.  The snort.conf file is the file that configures the operating
parameters for snort.  The output lines determine where snort will log
and alert.

http://www.snort.org/docs/faq.html#5.2

You may want to read the documents that come with snort (including
README, USAGE, and README.database), and then read the Snort Users
Manual and the FAQ.  All this can be found at the snort website.

Andrew

-----Original Message-----
From: dweise [mailto:dweise at ...4303...] 
Sent: Thursday, September 19, 2002 3:53 PM
To: snort-users at lists.sourceforge.net
Subject: RE: [Snort-users] Snort and MySql, Postgresql


hi,
output lines when comiling snort, or when i run snort?
At 10:14 AM 9/19/2002 -0500, Hutchinson, Andrew wrote:
>What do your output lines look like in snort.conf?
>
>-----Original Message-----
>From: dweise [mailto:dweise at ...4303...]
>Sent: Thursday, September 19, 2002 9:34 AM
>To: snort-users at lists.sourceforge.net
>Subject: [Snort-users] Snort and MySql, Postgresql
>
>
>Hi,
>    I have Snort v1.8.7, Mysql  3.23.45, and Postgresql v7.2.2 and 
>ACID.  Each of them start with no problems. However there is a problem,

>ACID never shows any of the alerts or portscans
>from my /var/log/snort/portscan.log or /var/log/snort/alert file. I
>checked
>each database andThey all start fine but ACID never reports a thing. I
>checked the database in MySQL and Postg and they are both blank. Thus I
>presuming that snort is not talking to mysql or postgres. (by the way i
>have snort compiled for one or the other at any given time) Can anybody
>tell me how to debug snort talking to the databases?
>
>
>--David Weise
>    DIS/OIT
>    Unix Administrator
>    Rider University
>     Phone: (609) 896-5000 x7439
>     Fax: (609) 896-5184
>
>
>"The real race is not on the hot, paved road, the torturous off-road 
>course or the smooth-surface velodrome. It is in the electrochemical 
>pathways of
>your mind."--Alexi Grewal
>
>
>
>-------------------------------------------------------
>This sf.net email is sponsored by:ThinkGeek
>Welcome to geek heaven.
>http://thinkgeek.com/sf _______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe: 
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive: 
>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>-------------------------------------------------------
>This sf.net email is sponsored by:ThinkGeek
>Welcome to geek heaven.
>http://thinkgeek.com/sf _______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?listort-users

--dave



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf _______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list