RE: Database Plugin - Alert vs. Log

["L. Christopher Luther" <CLuther () Xybernaut com>]

Thanks, the information is most helpful.  Of course, if the db plugin is
only in log mode, then portscan alerts are not sent to the database. :{  

When o when will the portscan data be normalized so that it can cleanly be
put into a database?!  Sigh...  

- Christopher


-----Original Message-----
From: Erek Adams [mailto:erek () theadamsfamily net]
Sent: Wednesday, November 27, 2002 2:47 PM
To: L. Christopher Luther
Cc: Snort-Users (E-mail)
Subject: Re: [Snort-users] Database Plugin - Alert vs. Log


On Wed, 27 Nov 2002, L. Christopher Luther wrote:

> Can anyone tell me if there are any differences between sending "alert"
data
> to a MySQL database vs. sending only "log" data to a MySQL database?

[...snip...]

Yeppers.  Our Benevolent Dictator For Life has a few words [0] to say.

Hope that helps!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


[0]     http://www.theadamsfamily.net/~erek/snort/logging_methods.txt