Re: [Snort-users] fast logging

From: Bamm Visscher <bamm(at)satx.rr.com>
Date: Thu Feb 27 2003 - 09:00:15 EST

Using snort to insert alerts into the DB is going to be slow. You want to utilize the unified output format in snort and then use Barnyard to insert the alerts into the DB. Unfortuneately there isn't a lot of documentation for Barnyard (yet). Try searching the mailing list archives. There are also BY specific mailing lists too (barnyard-users, barnyard-devel).

Bammkkkk

On Thu, Feb 27, 2003 at 10:34:11AM +0000, Always Bishan wrote:
> hi
> I read in one of the articles on net that snort drops

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users Received on Thu Feb 27 09:04:35 2003