[Snort-users] Using snort on a per-instance basis....archive databases
skottke at ...11993...
Fri Oct 29 07:50:29 EDT 2004
An easy way to do it would be to save the database off somewhere perhaps
in a directory with the clients name where the data was collected and
then create a new database.
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Jason
Sent: Friday, October 29, 2004 8:31 AM
To: 'snort-users at lists.sourceforge.net'
Subject: [Snort-users] Using snort on a per-instance basis....archive
I would like to know if there is someway to backup and clean the
database after each use of snort...basically we've got it running on a
notebook and when a client calls with a problem we usually drop the
notebook on their network for a week or so...I'm currently just using
to manually delete all the alerts in between each customer, but this
long and I don't really want to have to loose the data. I would love to
able to archive the database after each customer deployment and clean
database back to a pristine state. Can this be done? I've got webmin
installed on this box if that helps me out at all. Thanks. Could I
after archiving the database for customerX, pull that archive back up
run through acid for analysis? Thanks.
This Newsletter Sponsored by: Macrovision
For reliable Linux application installations, use the industry's leading
setup authoring tool, InstallShield X. Learn more and evaluate
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
More information about the Snort-users