RE: snort not logging to the database

["Philippe Dhont (Sea-ro)" <Philippe.Dhont () searo be>]

Check everything again.
Check your mysql connection and test it (with the mysql gui or connector or
on the linux box), look if all your tables are present.
Test it with the user who needs connection to it, this is the acid user.
You have probably no connection because you have not enough rights
Check the following in your snort.conf

Output database: alert, mysql, user=xxx password=xxx dbname=snort
host=x.x.x.x
User= user that has connection to the snort database
Password= well, i don't have to explain this i guess ?
Dbname= name of the database where your tables are in
Host= the ip address from your host, even if it is at the same pc, fill in
an ip address instead of localhost.


Check you logs files for errors, if it is any rights problem, then it is
logged in mysql logs, apache logs, or just the logs.

Greetz!

El felipe


-----Original Message-----
From: Edu Sananselmo [mailto:esananselmo () albasoft com] 
Sent: donderdag 21 november 2002 13:16
To: snort-users () lists sourceforge net
Subject: [Snort-users] snort not logging to the database


It seems as it snort didn't want to log alerts to the database (it does log
to /var/snort/alert), and I swear I haven't touched anything. I also ran
snort with the -T option and everything goes well, but when I run it in
daemon mode, there's no connection to the database. When I click on some
links on the acid page, I get messages saying that there's no connection to
the database, so I'm really lost. What's wrong? Thanks in advance.


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf _______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users