iT邦幫忙

0

請問一下snort連資料庫

https://ithelp.ithome.com.tw/upload/images/20180705/20107445IpxfQW5Nre.png

https://ithelp.ithome.com.tw/upload/images/20180705/20107445GjWDHT1dd2.png

528行是網路上說拿掉註解,並設定相關路徑,但是註解拿掉後snort執行會發生錯誤,請問一下是什麼問題,因為初學,所以想請問有人可以指導一下snort連接資料庫這塊嗎?謝謝

1 個回答

0
froce
iT邦高手 1 級 ‧ 2018-07-05 21:14:01

https://blog.snort.org/2012/07/database-output-is-dead-rip.html

For those of you that originally compiled Snort like: ./configure --enable-mysql

Or, if you look in your snort.conf and your "output" lines look like this:
output database: alert

Our recommendation is that after you upgrade to Snort 2.9.3.0, you move to full unified2 logging and use barnyard2 to read those unified2 files and input them into your mysql database.

好像這個plugin被移掉了,用barnyard2代替,你先看看你網路說明的版本吧。

Fu-sheng iT邦新手 5 級 ‧ 2018-07-06 11:18:24 檢舉

謝謝回答,我在試看看

我要發表回答

立即登入回答