Re: [pmacct-discussion] packet logger

[Karl O. Pinc]

On 09/22/2009 09:41:26 PM, Mada R Perdhana wrote:
> already leran snort but it only could save the logger into a packet
> log not
> on a databse, if u want to save into database u cannot use packet
> logger
> mode, but as IDS mode which u need to insert much rules...

This is a random guess, but...
you might be able to write a single IDS rule that matches every packet.

> 
> but
> 
>  how if use snort on packet logger mode then save it into a binary
> format,
> and use barnyard to save the log into database?
> 
> anyone here ever try it before??

This is all a bit off-topic.   You could ask on the snort list.


> 
> On Wed, Sep 23, 2009 at 10:36 AM, Karl O. Pinc <k...@meme.com> wrote:
> 
> > On 09/22/2009 04:58:27 PM, Mada R Perdhana wrote:
> > > any suggestion? but the app should be open source not a
> proprietary
> > > app.
> >
> > Sort?  See: snort.org
> >
> > >
> > > On Tue, Sep 22, 2009 at 10:50 PM, Paolo Lucente 
> <pa...@pmacct.net>
> > > wrote:
> > >
> > > > Hi Mada R,
> > > >
> > > > The packet logger scenario is not supported by pmacct - as per
> the
> > > > FAQS document, point Q6.



Karl <k...@meme.com>
Free Software:  "You don't pay back, you pay forward."
                 -- Robert A. Heinlein


_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists