[Snort-users] Snort and Barnyard2

Josh Bitto jbitto at ...16055...
Wed Feb 6 14:30:30 EST 2013


When you say surround the IP column are you referring to the schema? I’m not sure how to do what you suggest.



From: Y M [mailto:snort at ...15979...]
Sent: Wednesday, February 06, 2013 11:10 AM
To: Josh Bitto; snort-users at lists.sourceforge.net
Subject: RE: [Snort-users] Snort and Barnyard2

The IP address is saved as a numeric value  in the database. If you are using MySQL, then surround the ip column with INET_NTOA() function.

Look for: 12.14 Miscellaneous Functions in the MySQL Reference Manual.

YM
________________________________
From: Josh Bitto<mailto:jbitto at ...16055...>
Sent: ‎2/‎6/‎2013 10:05 PM
To: snort-users at lists.sourceforge.net<mailto:snort-users at lists.sourceforge.net>
Subject: [Snort-users] Snort and Barnyard2
Has anyone else had this issue come up where when you export the data from your database the IP's listed do not correspond with the actual IP addresses that have been captured when an event happens?


------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net<mailto:Snort-users at lists.sourceforge.net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130206/fcb156f9/attachment.html>


More information about the Snort-users mailing list