Snort
[Top] [All Lists]

[Snort-users] Compiling with mysql & mssql support

To: snort-users@lists.sourceforge.net
Subject: [Snort-users] Compiling with mysql & mssql support
From: David.Ryan@Quintiles.com
Date: Fri, 13 Apr 2007 11:05:50 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
In-reply-to: <mailman.79779.1176420269.32383.snort-users@lists.sourceforge.net>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
Sender: snort-users-bounces@lists.sourceforge.net

Hi All,

I currently have snort compiled with mysql support and it is logging correctly, but I am looking at changing the logging to point at a central MS SQL server.  Until I know it works I don't want to totally ditch the mysql logging.

Is this as 'easy' as recompiling with '- -with-mssql - -with-mysql', or do I have to compile with one option only ?

Also, my MSSQL people tell me that our central infrastructure only supports database connections with the following constraints -
  • the application must be able to run against a database hosted in a Named Instance, not the default SQL Server Instance
  • must not require administration privileges to the SQL Server Instance (admin access to the database is OK, not to the server instance)
  • we can only support SQL Server 2005 databases on the cluster
Does anyone know whether the Snort MSSQL support fits in this model ?  I will start reading now, but I'm up against a bit of time pressure, so if anyone knows the answers straight off it would be cool.

Thanks,

David
=================================
David Ryan
IT Security Engineer, Global IT Security
Quintiles, Global IT - Infrastructure, QDUB

david.ryan@quintiles.com
v:  +353-1-819-5186, GMT+0
m: +353-87-124-9108
=================================
**********************  IMPORTANT--PLEASE READ  ************************
This electronic message, including its attachments, is COMPANY CONFIDENTIAL
and may contain PROPRIETARY or LEGALLY PRIVILEGED information.  If you are 
not the intended recipient, you are hereby notified that any use, disclosure,
copying, or distribution of this message or any of the information included
in it is unauthorized and strictly prohibited.  If you have received this
message in error, please immediately notify the sender by reply e-mail and
permanently delete this message and its attachments, along with any copies
thereof. If this electronic message contains a zipped attachment and you do
not have a decompression tool, you may download unZIP (free of cost) from:
http://www.mk-net-work.com/us/uz/unzip.htm. Alternatively, you may request
that the attachment be resent in an uncompressed format.        Thank you. 
************************************************************************

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
<Prev in Thread] Current Thread [Next in Thread>