RE: [Snort-users] Snort logging to encrypted MySQL (ssl) server?

You should get the MYSQL manual from the www.mysql.com site. There is a
section on setting up SSL.

The manual is over 1000 pages and a wealth of information on the system
including a tutorial.

-----Original Message-----
From: Dirk Geschke [mailto:Dirk_Geschke@genua.de]
Sent: 05 November 2003 08:12
To: decoster@engr.wisc.edu
Cc: snort-users@lists.sourceforge.net; Dirk_Geschke@genua.de
Subject: Re: [Snort-users] Snort logging to encrypted MySQL (ssl) server?


Hi David,

> Does anyone have any ideas on how to make snort log to MySQL with SSL?
> I've tried recompiling snort with the MySQL libraries and includes from
> 4.0.3, but nothing seems to work.

I think it could be done if you edit line 1925 of the file

snort-2.0.3/src/output-plugins/spo_database.c

and change the line

if(mysql_real_connect(data->m_sock, data->shared->host, data->user,
data->password, data->shared->dbname, x, NULL, 0) == 0)

to

if(mysql_real_connect(data->m_sock, data->shared->host, data->user,
data->password, data->shared->dbname, x, NULL, CLIENT_SSL ) == 0)

Note the change in the last field. After this it should work but I did not
test this, it won't increase the performance...

Regards

Dirk Geschke






-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program. Does
SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users