Snort mailing list archives
Question for the Group??
From: Snow Jacob C KPWA <JacobSC () kpt nuwc navy mil>
Date: Mon, 10 Feb 2003 13:46:57 -0800
Kind of an add on question to this but slightly off topic is what is the benefit for running this configuration on a Linux machine/machines vs. running this setup on a win2k server/pro box? Thank you, Jacob Snow jacobsc () kpt nuwc navy mil (360)315-3487 NAVSEA Intern -----Original Message----- From: Kenneth G. Arnold [mailto:bkarnold () cbu edu] Sent: Monday, February 10, 2003 1:39 PM To: Snort-users () lists sourceforge net Subject: Re: [Snort-users] Access denied for user: '@192.168.0.1' -SNORT- It looks like the host where this snort process is trying to run does not have write access to the mysql database located at 192.168.0.69 connecting as user sensor1. Is 192.168.0.1 the host where snort is actually running? I am confused as to why the error message doesn't mention user sensor1@192.168.0.1 if that is the case. There doesn't appear to be a user specified in the error message yet the log shows that it knows the user is sensor1. Anyway, you need to make sure that the MySQL database has write permission for user sensor1 connecting from 192.168.0.1 (or wherever your snort machine is located). Page 19 of the Snort Installation Manual for Snort, MySQL and ACID on Redhat 7.3 describes how to do this for a user snort from both the localhost and from all hosts. I would recommend that you only allow access from the specific hosts that need it. That documentation is located at http://www.snort.org/docs/snort-rh7-mysql-ACID-1-5.pdf Ken At 12:46 PM 2/10/03 -0800, mike Hughes wrote:
Whats up guys...i am folowing this as my refernce: http://www.sans.org/rr/intrusion/practical_guide.php Im on the second to last step and am stuck and cant figure it out...Im a noob to mysql tooo im getting this error: database: mysql_error: Access denied for user: '@192.168.0.1' to database 'snort' Fatal Error, Quitting..
------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Question for the Group?? Snow Jacob C KPWA (Feb 10)
- <Possible follow-ups>
- Re: Question for the Group?? Matt Kettler (Feb 10)