[Snort-users] MySQL support for Snort 2.9.4

Michael Steele michaels at ...9077...
Mon Dec 10 21:16:09 EST 2012


Is there any chance that all the rules that are available have the to the
public have the snort.conf replaced with correct versions that don't have
the output database included as an option.

As an example the Registered Users Release of the rules labeled
snortrules-snapshot-2931.tar.gz still has a reference in the snort.conf to
the output database option. Might be a thought to go back to any of the
rules that are available to the public that reference a version of Snort
that doesn't support the output database and update the snort.conf to not
reference it. Just a thought... 

Best regards,
Michael...

-----Original Message-----
From: Jeremy Hoel [mailto:jthoel at ...11827...] 
Sent: Monday, December 10, 2012 7:48 PM
To: Kaya Saman
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] MySQL support for Snort 2.9.4

Database support has been removed from snort.  Use the unified2 output and
Barnyard2 to put data into a databse.


On Tue, Dec 11, 2012 at 12:15 AM, Kaya Saman <kayasaman at ...11827...> wrote:
> Hi,
>
> I've installed Daq 2.0 and Snort 2.9.4 however, I'm confused about the 
> MySQL support.
>
> Initially running ./configure --help didn't yield any option for
> support: --enable-mysql=
>
> Also adding the option: output database - in the snort.conf file 
> doesn't work either.
>
> Should I downgrade to version 2.9.3 or am I missing something?
>
> I have gone through the Snort user manual from www.snort.org/docs and 
> saw some information on this under preprocessor_stream5 but nothing to 
> add to my snort.conf.
>
>
> What am I missing???
>
>
> Thanks.
>
>
> Kaya
>
> ----------------------------------------------------------------------
> -------- LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free 
> Trial Remotely access PCs and mobile devices and provide instant 
> support Improve your efficiency, and focus on delivering more 
> value-add services Discover what IT Professionals Know. Rescue 
> delivers http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort
news!

----------------------------------------------------------------------------
--
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial Remotely
access PCs and mobile devices and provide instant support Improve your
efficiency, and focus on delivering more value-add services Discover what IT
Professionals Know. Rescue delivers http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort
news!






More information about the Snort-users mailing list