Re: [Snort-users] mysql database "gone away"

> Obviously it would be nice if some process could be configured to retry
> this connection and get the data back to the server.  What do other
> people use to get over this problem ?  I mean, if you have a
> connectivity problem into your data centre and you lose connectivty to
> all your probes, do people really manually log into each remote probe
> and restart the service ?  It just seems a bit . . . manual.  I accept
> that it is a limitation of the mysql client in use, but in practical
> terms what do people do to ensure the database link doesn't stay down
> for hours(days/weeks) after a temporary glitch like this ?

Use unified output and barnyard. Writing to the database directly from
the snort engine directly should be a last resort.

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users