Why might Snort be a good tool to use with open source databases, like MySQL and Postgres?
Orebaugh: Snort and Barnyard both have built-in functionality to log to MySQL and Postgres databases. Add-on tools such as ACID/BASE also work with these databases. There is a lot of documentation on integrating Snort and its add-on tools with MYSQL and Postgres. Once again, the fact that these are free doesn’t hurt! Would Snort also work well with commercial databases? Orebaugh: Yes, currently Snort also has plugins for Microsoft SQL, Oracle and Open Database Connectivity (ODBC). Why should a company run Snort as a Linux daemon? Orebaugh: Some administrators wish to run Snort in the background and start it up at boot time. Snort can be run in the background as a daemon process using the -D command line option. The Snort command can be added to the /etc/rc.d/rc.local script to run at boot time. This will run Snort in continual-processing mode; however, it is useful only if you are getting good notifications from Snort; otherwise you are effectively ignoring it. One of your book’s topic
