[Snort-users] snort and mysql5 losing db connection

Richard Bejtlich taosecurity at ...11827...
Thu Jun 14 09:41:23 EDT 2007


Greg King wrote:

> Another thread back in 2005 mentioned to use barnyard and not the sql
> connector. That is not an option for base and probably would fail with aanval
> users as well.

Why is Barnyard not an option for BASE users?  Using Barnyard is your
best option.  Direct logging from Snort to MySQL has been a bad idea
for about six years now, but like SQL Slammer it seems to always be
with us...

Sincerely,

Richard




More information about the Snort-users mailing list