OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Bamm Visscher (bammsatx.rr.com)
Date: Fri May 04 2001 - 07:06:32 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Larry,

    Use:
    output database:alert, mysql, user=xxx dbname=snort host=yyy

    Bammkkkk

    Larry Chuon wrote:
    >
    > Hi everyone,
    >
    > I installed, Apache, PHP, MySQL. I then configured snort to log to the
    > database as follow: output database:log, mysql, user=xxx dbname=snort
    > host=yyy.
    >
    > I started snort with the following syntax:
    > ./snort -c ./snort.conf -l ./log -h 10.10.10.0/24 -Afull &
    >
    > The alert file in ./log kept on growing, but the database showed 0 alert. I
    > was able to launch ACID. The statistics were all zeroes.
    >
    > Can someone please help?
    >
    > Larry

    _______________________________________________
    Snort-users mailing list
    Snort-userslists.sourceforge.net
    Go to this URL to change user options or unsubscribe:
    http://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users