Snort mailing list archives
Re: Mult snort instances and portscan logging
From: "Andrew R. Baker" <andrewb () snort org>
Date: Thu, 25 Oct 2001 12:43:12 -0700
Comments inline.
Stephen Shepherd wrote: Questions [about portscan logs]: Will barnyard collect this data together as well as Alert data?
Barnyard does not support reading the portscan logs at this time. There is work being done on an updated portscan detector that will output data capable of being read by barnyard.
BTW any idea when Barnyard will support Microsoft SQL? I would be more than happy to help test that. Implementing Barnyard is the next big step in my IDS project.
Postgres support is currently being worked on for the barnyard database output plugin. MS SQL support will be included in the future, but that may take some time. -A _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Mult snort instances and portscan logging Stephen Shepherd (Oct 25)
- Re: Mult snort instances and portscan logging Andrew R. Baker (Oct 25)
- RE: Mult snort instances and portscan logging Stephen Shepherd (Oct 26)
- <Possible follow-ups>
- Re: Mult snort instances and portscan logging roman (Oct 25)
- RE: Mult snort instances and portscan logging Stephen Shepherd (Oct 26)
- RE: Mult snort instances and portscan logging roman (Oct 26)
- RE: Mult snort instances and portscan logging Stephen Shepherd (Oct 26)
- RE: Mult snort instances and portscan logging roman (Oct 26)
- RE: Mult snort instances and portscan logging Stephen Shepherd (Oct 26)
- Re: Mult snort instances and portscan logging Andrew R. Baker (Oct 25)