Snort mailing list archives
Snort + MySQL on multiple sensors
From: "Hasnain Atique" <hatique () hasnains com>
Date: Thu, 13 Dec 2001 23:13:59 +0800
I'm trying to get snort running on multiple sensors with logging directed to local (on-sensor) instances of MySQL. The
final objective is to collect the alerts via mysqldump and load into a central alert database for correlation. I did
change the sensor id field for each sensor's local database before taking the dump, yet when I try to load the data
into the central sensor I get
ERROR 1062 at line 1320: Duplicate entry '0' for key 1
Have any of you done this before? How do I get this working?
Thanks,
-- Hasnain
Current thread:
- Snort + MySQL on multiple sensors Hasnain Atique (Dec 13)
