Snort mailing list archives

Snort + MySQL on multiple sensors


From: "Hasnain Atique" <hatique () hasnains com>
Date: Thu, 13 Dec 2001 23:13:59 +0800


I'm trying to get snort running on multiple sensors with logging directed to local (on-sensor) instances of MySQL. The 
final objective is to collect the alerts via mysqldump and load into a central alert database for correlation. I did 
change the sensor id field for each sensor's local database before taking the dump, yet when I try to load the data 
into the central sensor I get 

    ERROR 1062 at line 1320: Duplicate entry '0' for key 1

Have any of you done this before? How do I get this working?

Thanks,

-- Hasnain



Current thread: