Re: Can you make snort work with mysql after first installing snort?

["Steve Crow" <scrow () amarilloheartgroup com>]

Wkitty, thank you for your input. I'm newer to the list so I'm not sure what
I did wrong:

" also, please remember to start your own thread/topic by using the "write
new message" option instead of replying to someone else's thread/topic...
this way, you don't hijack their discussion and it makes it easier for
others to see your discussion... some of us will block/filter/ignore certain
topics after a certain time and if you try to tag along on that topic, your
posts will be missed..."

Don't we just have to send a new email to snort-users () lists sourceforge net
to start a new thread? Sometimes I will reply to an email and erase the
subject and content - thinking this creates a 'new' email; does this cause a
problem?

Thanks again,

Steve


-----Original Message-----
From: waldo kitty [mailto:wkitty42 () windstream net] 
Sent: Thursday, April 24, 2014 7:43 PM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Can you make snort work with mysql after first
installing snort?

On 4/24/2014 3:01 PM, Steve Crow wrote:
> Hi, I installed snort; now I would like to increase its usefulness by 
> using some reporting tools. It seems mysql is needed. Can snort be 
> made to work with mysql via configuration, or does it have to be 
> re-configured and go through make and make install again?

you only need to install the other tools and ensure that they can find your
snort's unified2 output file which you need to configure in your
snort.conf... 
those tools, like barnyard2, will take the data from the U2 (unified2) log
file and insert them into the database... whatever database you choose to
use and that they support...

also, please remember to start your own thread/topic by using the "write new
message" option instead of replying to someone else's thread/topic... this
way, you don't hijack their discussion and it makes it easier for others to
see your discussion... some of us will block/filter/ignore certain topics
after a certain time and if you try to tag along on that topic, your posts
will be missed...

-- 
NOTE: No off-list assistance is given without prior approval.
       Please keep mailing list traffic on the list unless
       private contact is specifically requested and granted.

----------------------------------------------------------------------------
--
Start Your Social Network Today - Download eXo Platform
Build your Enterprise Intranet with eXo Platform Software
Java Based Open Source Intranet - Social, Extensible, Cloud Ready
Get Started Now And Turn Your Intranet Into A Collaboration Platform
http://p.sf.net/sfu/ExoPlatform
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort
news!


------------------------------------------------------------------------------
Start Your Social Network Today - Download eXo Platform
Build your Enterprise Intranet with eXo Platform Software
Java Based Open Source Intranet - Social, Extensible, Cloud Ready
Get Started Now And Turn Your Intranet Into A Collaboration Platform
http://p.sf.net/sfu/ExoPlatform
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!