RE: multiple snorts to 1 mysql database

["Jason Lewis" <jlewis () packetnexus com>]

Is your DNS setup correctly?  I ended up using snort () xxx xxx xxx xxx instead
of the name.

Maybe put the IP and name in /etc/hosts?

Jason Lewis
http://www.packetnexus.com
It's not secure "Because they told me it was secure".
The people at the other end of the link know less
about security than you do. And that's scary.


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of
Madziarczyk, Jonathan
Sent: Monday, October 01, 2001 6:42 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] multiple snorts to 1 mysql database


Hi all,

I'm currently attempting to log a *nix snort box to a Win2k box running
snort/mysql/acid.  I am able to successfully log to mysql locally on the
win2k box thanks to the directions provided by Silicon Defense.  I have
compiled snort on the *nix box --with-mysql=pathtomysql (I didn't really
install mysql completely since I'm not logging to the local box, but it went
through with no errors) and have the following statement in my snort.conf:
output database: log, mysql, user=snort password=NOT dbname=snort
sensor_name=linux host=10.1.4.150 port=3306

I then went into mysql and added the user snort () host domain com to the
database with the same permissions that snort@localhost had(I can see it if
I do a "mysql> select * from user;")  Makes sense to me so far.

However, when I try to run snort, I get the following:
.......edited for space.......
Using LOCAL time
database: compiled support for ( mysql )
database: configured to use mysql
database:          user = snort
database: password is set
database: database name = snort
database:   sensor name = linux
database:          host = 10.1.4.150
database:          port = 3306
database: mysql_error: Access denied for user: 'snort () host domain com'
(Using password: YES)
Fatal Error, Quitting..

Does anyone have any ideas?

Thanks,
JonM

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users