Snort mailing list archives
RE: Mysql 101b
From: "Edward W. Ray" <ewray_home () mmicman com>
Date: Wed, 23 Oct 2002 14:29:33 -0700
Yeah, I figured it out. I can be a dumb ass sometimes. FYI, I had the following uncommented in my snort.conf file: # This example will create a rule type that will log to syslog # and a mysql database. # ruletype redalert # { # type alert # output alert_syslog: LOG_AUTH LOG_ALERT # output database: log, mysql, user=root dbname=snort host=localhost # } By the way, I got your response before my question was posted to the database. I have been getting multiple copies of people's e-mails. Snort-users () list sourceforge net and snort-users-admin () lists sourceforge net Might want to tell folks to e-mail to one list. I assumes snort-users are for usual questions, where snort-admin is for the administrator (s) of the user group or for code tweaks? Regards, Edward W. Ray -----Original Message----- From: Hicks, John [mailto:JHicks () JUSTICE GC CA] Sent: Wednesday, October 23, 2002 1:00 PM To: 'Edward W. Ray'; snort-users () lists sourceforge net Subject: RE: [Snort-users] Mysql 101b This looks like your trying to config usage of mySQL twice??? The first instance looks ok (database: password is set), but the repeat of this message doesn't show that the password is set. Check your config file for 2 lines relating to mySQL. HTH, John -----Original Message----- From: Edward W. Ray [mailto:ewray_home () mmicman com] Sent: Wednesday, October 23, 2002 3:46 PM To: snort-users () lists sourceforge net Subject: [Snort-users] Mysql 101b Still having issues with mysql. It should for root; I have the password set properly in my snort.conf file. I had this once before when I first set up ACID. When will I learn to document?? I'm going to write it down this time. Thanks in advance for help, here is the error: [root@ns2 root]# snort -U -d -c /root/.snortrc/snort.conf database: compiled support for ( mysql ) database: configured to use mysql database: user = root database: password is set database: database name = snort_log database: host = localhost database: sensor name = 192.168.1.102 database: sensor id = 1 database: schema version = 106 database: using the "log" facility database: compiled support for ( mysql ) database: configured to use mysql database: user = root database: database name = snort database: host = localhost database: sensor name = 192.168.1.102 database: mysql_error: Access denied for user: 'root@localhost' (Using password: NO) Fatal Error, Quitting.. [root@ns2 root]# Regards, Edward W. Ray
Current thread:
- RE: Mysql 101b Hicks, John (Oct 23)
- RE: Mysql 101b Edward W. Ray (Oct 23)
- ACID/SNORT Newbie Mike Koponick (Nov 01)
- RE: Mysql 101b Edward W. Ray (Oct 23)