Snort mailing list archives
RE: Snort logging to encrypted MySQL (ssl) server?
From: PPowenski () oag com
Date: Wed, 5 Nov 2003 09:12:16 -0000
You should get the MYSQL manual from the www.mysql.com site. There is a section on setting up SSL. The manual is over 1000 pages and a wealth of information on the system including a tutorial. -----Original Message----- From: Dirk Geschke [mailto:Dirk_Geschke () genua de] Sent: 05 November 2003 08:12 To: decoster () engr wisc edu Cc: snort-users () lists sourceforge net; Dirk_Geschke () genua de Subject: Re: [Snort-users] Snort logging to encrypted MySQL (ssl) server? Hi David,
Does anyone have any ideas on how to make snort log to MySQL with SSL? I've tried recompiling snort with the MySQL libraries and includes from 4.0.3, but nothing seems to work.
I think it could be done if you edit line 1925 of the file snort-2.0.3/src/output-plugins/spo_database.c and change the line if(mysql_real_connect(data->m_sock, data->shared->host, data->user, data->password, data->shared->dbname, x, NULL, 0) == 0) to if(mysql_real_connect(data->m_sock, data->shared->host, data->user, data->password, data->shared->dbname, x, NULL, CLIENT_SSL ) == 0) Note the change in the last field. After this it should work but I did not test this, it won't increase the performance... Regards Dirk Geschke ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort logging to encrypted MySQL (ssl) server? David DeCoster (Nov 04)
- Re: Snort logging to encrypted MySQL (ssl) server? jon baer (Nov 04)
- Re: Snort logging to encrypted MySQL (ssl) server? David DeCoster (Nov 04)
- Re: Snort logging to encrypted MySQL (ssl) server? jon baer (Nov 04)
- Re: Snort logging to encrypted MySQL (ssl) server? David DeCoster (Nov 04)
- Re: Snort logging to encrypted MySQL (ssl) server? Frank Knobbe (Nov 04)
- Re: Snort logging to encrypted MySQL (ssl) server? David DeCoster (Nov 04)
- Re: Snort logging to encrypted MySQL (ssl) server? jon baer (Nov 04)
- Re: Snort logging to encrypted MySQL (ssl) server? Ben Nelson (Nov 04)
- Re: Snort logging to encrypted MySQL (ssl) server? omi (Nov 04)
- Re: Snort logging to encrypted MySQL (ssl) server? Dirk Geschke (Nov 05)
- <Possible follow-ups>
- RE: Snort logging to encrypted MySQL (ssl) server? PPowenski (Nov 05)
- Snort logging to encrypted MySQL (ssl) server? David DeCoster (Nov 05)
- Re: Snort logging to encrypted MySQL (ssl) server? boka (Nov 06)