Re: Sensor not logging data

[Erek Adams <erek () theadamsfamily net>]

On Fri, 11 Oct 2002, Andy Stein wrote:

> I have been tinkering with the snort / acid combination for a few weeks.
> Since I upgraded to 1.9, my sensor logs about 50 events and then dies.
>
> ps shows snort is still running on the sensor and netstat -an shows a
> connection to the database, but nothing new is going in.
>
> I have reinstalled mysql on the server and also snort and mysql support on
> the sensor.
>
> When I first start the daemon, that's when it logs the data, but it stoped
> immediately after.

Are you using the DB output (MySQL?) plugin?  If so, I would suggest moving to
BarnYard and using it to connect to the DB instead.

What you are describing _sounds_ like the DB plugin can't keep a connection to
the MySQL DB.  What _state_ is the socket (to the db) in when you look at it
via netstat?

Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users