The Snort NIDS has the ability to log the triggered alerts to several types of databases: MySQL, PostgreSQL, Oracle, SQL Server, and unixODBC compliant database.
The database logging functionality is implemented in the output plug-in
files: spo_database.c
and spo_database.h
.
This documentation covers Snort v1.8 - v1.9 on both Windows and UNIX.