Re: Snort logging to encrypted MySQL (ssl) server?

[Dirk Geschke <Dirk_Geschke () genua de>]

Hi David,

> Does anyone have any ideas on how to make snort log to MySQL with SSL? 
> I've tried recompiling snort with the MySQL libraries and includes from
> 4.0.3, but nothing seems to work.

I think it could be done if you edit line 1925 of the file

  snort-2.0.3/src/output-plugins/spo_database.c

and change the line 

if(mysql_real_connect(data->m_sock, data->shared->host, data->user, 
    data->password, data->shared->dbname, x, NULL, 0) == 0)

to 

if(mysql_real_connect(data->m_sock, data->shared->host, data->user, 
    data->password, data->shared->dbname, x, NULL, CLIENT_SSL ) == 0)

Note the change in the last field. After this it should work but
I did not test this, it won't increase the performance...

Regards

Dirk Geschke






-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users