Snort mailing list archives
Snort + MySQL on multiple sensors
From: "Hasnain Atique" <hatique () hasnains com>
Date: Thu, 13 Dec 2001 23:13:59 +0800
I'm trying to get snort running on multiple sensors with logging directed to local (on-sensor) instances of MySQL. The final objective is to collect the alerts via mysqldump and load into a central alert database for correlation. I did change the sensor id field for each sensor's local database before taking the dump, yet when I try to load the data into the central sensor I get ERROR 1062 at line 1320: Duplicate entry '0' for key 1 Have any of you done this before? How do I get this working? Thanks, -- Hasnain
Current thread:
- Snort + MySQL on multiple sensors Hasnain Atique (Dec 13)