Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Support » ip_src in mysql database

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

ip_src in mysql database


Posted by brian on March 14, 2005 06:37:38

I have a quick question as to how the src and dst IP's are logged to the mysql database. I wrote a perl script that uses DBI to query snort's mysql database for certain signatures and events. The problem i'm running into however is that when I query the IP addresses i get a result like this:
+------------+
| ip_dst |
+------------+
| 1089059683 |
+------------+

my question is how are these IP's being stored and what is the easiest way to convert them to readable IP addresses?

thanks in advance

Posted by novowels on March 14, 2005 12:53:32

it's an int. You can have mysql convert it for you as follows.

select inet_ntoa(ip_src) as source_ip from ...