Snort mailing list archives
Re: SMB Alerts w/MySQL
From: Kevin Pietersma <kev () attcanada net>
Date: Fri, 24 Aug 2001 16:04:43 -0400
Don't use -M on the command-line. Specify SMB output in your snort.confoutput database: alert, mysql, dbname=snort user=snort host=10.*.*.* password=***** sensor_name=name detail=full
output smbalert: /etc/snort/smbhosts cheers, kev At 01:15 PM 8/24/01 -0600, Paul D. Shaffer wrote:
Does anyone know a way to get SMB alert working in conjunction with MySQLlogging? Is there a way to config SMB alert as an output plugin in snort.conf? Whenever I use the -M switch on the cmdline, MySQL logging stops - with the obligatory warning about command-line override, of course. tks... cheers, Paul _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- SMB Alerts w/MySQL Paul D. Shaffer (Aug 24)
- Re: SMB Alerts w/MySQL Kevin Pietersma (Aug 24)
- RE: SMB Alerts w/MySQL Paul D. Shaffer (Aug 24)
- RE: SMB Alerts w/MySQL Kevin Pietersma (Aug 24)
- Re: RE: SMB Alerts w/MySQL Phil Wood (Aug 24)
- RE: SMB Alerts w/MySQL Paul D. Shaffer (Aug 24)
- Re: SMB Alerts w/MySQL Kevin Pietersma (Aug 24)