Snort mailing list archives

Re: Reading to MySQL


From: "Joel Esler (jesler)" <jesler () cisco com>
Date: Mon, 26 Oct 2015 18:33:44 +0000

Totally not the question asked.

--
Joel Esler
Manager, Talos Group




On Oct 26, 2015, at 2:07 PM, Ryan <ryan () organizedvillainy com> wrote:

Attached is a ruby script I wrote a while ago that watches your suricata
unified log and transmits it to syslog. You could easily manipulate this
into injecting into MySQL instead.

_R

On 10/26/15 1:00 PM, wkitty42 () windstream net wrote:
On 10/26/2015 12:22 PM, Adonis Okpidi wrote:
Please I was wondering what the process is to generate alerts to a MySQL database?
you have to configure snort to use unified logging as well as installing
barnyard2 to read the unified log and emit it to the database...


<unified_watcher.rb>------------------------------------------------------------------------------
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

------------------------------------------------------------------------------
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

Current thread: