Snort mailing list archives
RE: Acid/PHP/MySQL/Apache working ... But one more question
From: "Esler, Joel Contractor" <EslerJ () RCERT-S ARMY MIL>
Date: Sat, 14 Jun 2003 13:24:16 -0400
Thanks. However, not the whole picture.. I compile snort with the --with-mysql=<IP>:<port>?? J -----Original Message----- From: Michael Steele [mailto:michaels () winsnort com] Sent: Saturday, June 14, 2003 12:46 PM To: snort-users () lists sourceforge net Subject: RE: [Snort-users] Acid/PHP/MySQL/Apache working ... But one more question Install Snort on the remote sensors and have the database plug-in point to the MySQL database on the master sensor. You need a clear shot from the slave to the master on the designated port. You need to make sure the remote sensor has the necessary permissions to insert data into the database. Also set the sensor_name in the plug-in to that slave's unique hostname so you can distinguish between which sensor the alert originated from. Cheers... -Michael Steele -- System Engineer / Security Support Technician mailto:michaels () winsnort com Website: http://www.winsnort.com Snort: Open Source Network IDS - http://www.snort.org -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Esler, Joel Contractor Sent: Saturday, June 14, 2003 8:40 AM To: 'snort-users () lists sourceforge net' Subject: [Snort-users] Acid/PHP/MySQL/Apache working ... But one more question Got it all working, I just have one more question.... If I have more than one sensor, how do I make all the alerts from several sensors feed into one database, and furthermore show up on Acid? Joel ------------------------------------------------------- This SF.NET email is sponsored by: eBay Great deals on office technology -- on eBay now! Click here: http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.NET email is sponsored by: eBay Great deals on office technology -- on eBay now! Click here: http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.NET email is sponsored by: eBay Great deals on office technology -- on eBay now! Click here: http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: Acid/PHP/MySQL/Apache working ... But one more question Esler, Joel Contractor (Jun 14)