RE: RE: [Snort-users] Remote Mysql

permalink · #1 (**permalink**) 03-18-2005

This is a multi-part message in MIME format.

------_=_NextPart_001_01C52BC7.BA46A8F1
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

You just need the mysql libs, so yes, compile snort with the -mysql and
it will find the mysql libs if you have them in the default location.
Otherwise you may have to specify the location. As a suggestion, to be a
little bit more secure, I would run stunnel between the 2 devices and
let mysql run on top of that.=20

=20

Thanks,

Michael Brown

_____ =20

From: Salil D. [mailto:salildumbre@rediffmail.com]=20
Posted At: Friday, March 18, 2005 12:27 AM
Posted To: Snort
Conversation: RE: [Snort-users] Remote Mysql
Subject: Re: RE: [Snort-users] Remote Mysql
=20

=20
Hello Michael,

I am installing snort on proxy and mysql on other host
I probably need mysql client to run on the snort host
any ideas ?

Regards,
Salil D.

On Fri, 18 Mar 2005 Snort wrote :
>Not necessary if you already have mysql compiled in, just change it
from
>localhost to the remote host IP address
>
>output database: alert, mysql, user=3Dunhuh dbname=3DIDS =
sensor_name=3Dpffft
>sid=3D11 password=3Dfreewilly host=3D10.0.0.1
>
>Thanks,
>Michael Brown
> _____
>
> From: snort-users-admin@lists.sourceforge.net
>[mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Salil D.
>Posted At: Thursday, March 17, 2005 7:39 AM
>Posted To: Snort
>Conversation: [Snort-users] Remote Mysql
>Subject: [Snort-users] Remote Mysql
>
>
>Hello there,
>
>I was able to run snort with mysql both on same host
>I want to configure snort with mysql on remote machine
>
>what should be used with ./configure --with-mysql=3D?????????
>
>
>Thanks to all
>
>Salil.
>
>
> <http://clients.rediff.com/signature/track_sig.asp>

<http://clients.rediff.com/signature/track_sig.asp>=20

------_=_NextPart_001_01C52BC7.BA46A8F1
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">

<style>

</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dblue>

<div class=3DSection1>

You just need the mysql libs, so =
yes,
compile snort with the –mysql and it will find the mysql libs if =
you have
them in the default location. Otherwise you may have to specify the =
location. As
a suggestion, to be a little bit more secure, I would run stunnel =
between the 2
devices and let mysql run on top of that. <o:p></o:p>

<o:p> </o:p>=

<div>

Thanks,<o:p></o:p>

Michael =
Brown<o:p></o:p>

</div>

<div>

<div class=3DMsoNormal align=3Dcenter style=3D'text-align:center'>

<hr size=3D2 width=3D"100%" align=3Dcenter tabindex=3D-1>

</div>

</div>

From: Salil =
D.
[mailto:salildumbre@rediffmail.com] 
Posted At: Friday, March =
18, 2005
12:27 AM 
Posted To: Snort 
Conversation: RE: =
[Snort-users]
Remote Mysql 
Subject: Re: RE: =
[Snort-users]
Remote Mysql 
  

  
Hello Michael, 
 
I am installing snort on proxy and mysql on other host 
I probably need mysql client to run on the snort host 
any ideas ? 
 
Regards, 
Salil D. 
 
 
On Fri, 18 Mar 2005 Snort wrote : 
>Not necessary if you already have mysql compiled in, just change it =
from 
>localhost to the remote host IP address 
> 
>output database: alert, mysql, user=3Dunhuh dbname=3DIDS =
sensor_name=3Dpffft 
>sid=3D11 password=3Dfreewilly host=3D10.0.0.1 
> 
>Thanks, 
>Michael Brown 
>  _____ 
> 
> From: snort-users-admin@lists.sourceforge.net 
>[mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Salil =
D. 
>Posted At: Thursday, March 17, 2005 7:39 AM 
>Posted To: Snort 
>Conversation: [Snort-users] Remote Mysql 
>Subject: [Snort-users] Remote Mysql 
> 
> 
>Hello there, 
> 
>I was able to run snort with mysql both on same host 
>I want to configure snort with mysql on remote machine 
> 
>what should be used with ./configure --with-mysql=3D????????? 
> 
> 
>Thanks to all 
> 
>Salil. 
> 
> 
>  =
<http://clients.rediff.com/signature/track_sig.asp><o:p></o:p></spa=
n>

 
 
<a href=3D"http://clients.rediff.com/signature/track_sig.asp" =
target=3D"_blank"><img border=3D0 width=3D578 height=3D38 =
id=3D"_x0000_i1025"
src=3D"http://ads.rediff.com/RealMedia/ads/adstream_nx.cgi/www.rediffmail=
..com/inbox.htm@Bottom"></a><o:p></o:p>

</div>

</body>

</html>

------_=_NextPart_001_01C52BC7.BA46A8F1--

-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode