Snort mailing list archives
RE: snort not logging to database
From: "Estes, Matt CPR / FCBS" <Matt.Estes () eis army mil>
Date: Wed, 22 May 2002 15:19:30 -0400
Devon, Did you add the appropriate ./configure flag? Was the database schema created correctly? In my case: ./configure --with-mysql=/usr
-----Original Message----- From: Devon Harding - GTHLA [mailto:DHarding () gilatla com] Sent: Wednesday, May 22, 2002 10:46 AM To: 'snort-users () lists sourceforge net' Subject: [Snort-users] snort not logging to database Im running snort 1.86 w/ PureSecure. I see snort process running and the alert file is being populated, but snort is not logging to my mysql database. My snort.conf looks like this.... var HOME_NET [192.168.0.0/16] var EXTERNAL_NET ![192.168.0.0/16] var SMTP $HOME_NET var HTTP_SERVERS $HOME_NET var SQL_SERVERS $HOME_NET var DNS_SERVERS $HOME_NET preprocessor defrag preprocessor stream2: timeout 10, ports 21 23 80 110 143, maxbytes 16384 preprocessor unidecode: 80 preprocessor rpc_decode: 111 preprocessor bo: -nobrute preprocessor telnet_decode preprocessor portscan: $HOME_NET 4 3 portscan.log preprocessor portscan-ignorehosts: $DNS_SERVERS output database: log, mysql, user=snort dbname=snort password=snort host=192.168.0.18 sensor_name=snort1 _____________________ Devon Harding System Administrator Gilat Latin America 954-858-1600 dharding () gilatla com _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort not logging to database Devon Harding - GTHLA (May 22)
- <Possible follow-ups>
- snort not logging to database Devon Harding - GTHLA (May 22)
- RE: snort not logging to database Estes, Matt CPR / FCBS (May 22)
- RE: snort not logging to database Devon Harding - GTHLA (May 22)