snort mysql logging and portscan

["Ronneil Camara" <ronneilc () remingtonltd com>]

Hi guys,

What should be the content of "preprocessor portscan" if our
output_database is
output database: log, mysql, user=snort dbname=snort_log
password=password host=localhost

Should I still enable "preprocessor portscan" or comment it out ? or
will it log the portscans to mysql snort database?

I've got another question.

I was thinking of how I can manage my snort rules. Assuming we have
trimmed the rules. Would you advice me to do an automatic update of
snort rules by downloading it from snort.org? Coz what I'm thinking now
is that, if I do that, then my snort.conf will be overwritten. What's
the best approach for this?

Thanks in advance!!! :-)

Neil

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users