HI,
Ok I have mysql snort and acid configured, except snort wont start on boot I have to manually start it after boot which is beat. Any help on that would be nice. I start it on my rc.local as snort -y -c /usr/local/snort-2.2.0/etc/snort.conf -i eth0 -D It seems to log when I manually start it not starting up on a boot. My other dilema is what do I do with mysql after all this stuff is being dumped to mysql???? i am a real NOOBster here. I have mysql-query-browser and navicat but don't have a clue what to do with it??? Am I suppose to see pie charts or what....I do plan on buying a few books like snort and mysql but a hint in the right direction would be appreciated. With this info dumping to mysql it would be nice to look at it I did get acustomed just looking at the alert file. Thanks in advance.
Rick