Re: reboot the DB

[Erek Adams <erek () snort org>]

On Mon, 7 Jul 2003, Bryan Irvine wrote:

> Out of curiosity, what would happen if I rebooted the database server?
> Would Snort just queue up the logs and dump them when it comes back
> online?  I don't need to do this, it's more just philosophical in case I
> ever need to.

No.  Snort would block and then all the alerts would go into the bit
bucket.

What you really want is Barnyard.  It was built to handle things just like
that.  If the connectivity to the DB drops, the alerts spool and are sent
once the connections are restored.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users