Snort log to external MYSQL server

ozzbrian · Sep 30, 2008, 8:41 PM

Does anybody know how to get snort in version 1.2.1 to log to a external MYSQL database server?

thekod · Sep 30, 2008, 11:01 PM

You might have to manually edit either the inc\xml file if it's a package, or the conf file if not…anyway, here's the info you want: http://www.snort.org/docs/snort_htmanuals/htmanual_283/node176.html

ozzbrian · Oct 1, 2008, 12:17 PM

Thanks for the info. This helped. ;D

greyman · Oct 10, 2008, 3:00 AM

Was wondering if the people in this thread got this working. If so I would be interested in how you got it working. my initial attempts have all ended in FAIL.

thekod · Oct 10, 2008, 3:22 AM

Package or not?