Re: Barnyard and Multiple DB Connections

["John Creegan" <jcreegan () questarweb com>]

You can do this with just one ACID db, assuming that everyone is looking for alerts that do not cross purposes.  If 
not, you could certainly create then populate clones of the ACID db and configuration page, point the ACID 
configuration page clones to new db's, then point your browser at the clone pages.  Still, this seems like a bit more 
work than it seems you need.  And, you'd still have to get the archive done before you replicate to the clone db's.

Have you considered ACID alert groups?

> > > Jason Alexander <lists () itsecurity3 its uiowa edu> 09/22/04 10:43AM >>>
Is is possible to have barnyard output to multiple databases at once. I 
would like to have a database that everyone can look at and remove 
alerts once they have been process but would like to keep an archive 
database of everything that was logged for reference.

Thanks
Jason


-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php 
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net 
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users 
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



This message (including any attachments) contains confidential
information intended for a specific individual and purpose,
and is protected by law.  If you are not the intended recipient,
you should delete this message and are hereby notified that any
disclosure,copying, or distribution of this message, or the taking
of any action based on it, is strictly prohibited.



-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users