Re: mysql database "gone away"

[cconn () worldbank org]

Dirk,

I have used mysql output directly from snort, as well as barnyard.  As you
mentioned, snort will sometimes lose connectivity to the mysql DB.  This doesn't
just happen during a network outage either.  There's a bunch of ways you could
script a solution for this.  You could have a cron entry which runs every N
minutes and does a netstat to make sure the connection to the SQL server is
present, if not, it kills and restarts the snort process.  Same thing happens
with barnyard.

Chuck


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users