Snort mailing list archives
Error In snort HELP!!!
From: "Cody R. Smith" <csmith () go-cypress com>
Date: Fri, 16 Apr 2004 13:06:31 -0500
I am having a problem getting the senor name from the MySQL database, I have attached a view of the MySQL database. This is when starting snort l 'snort -d -l d:\ -c C:\Snort\etc\snort.conf' database: compiled support for ( mysql odbc ) database: configured to use mysql database: user = snort database: password is set database: database name = snort database: host = localhost database: sensor name = DATADEV:\ database: mysql_error: Unknown column 'last_cid' in 'field list' SQL=INSERT INTO sensor (hostname, interface, detail, encoding, last_cid) VALUES ('DATADEV:\\','\\','1','0', '0') database: Problem obtaining SENSOR ID (sid) from snort->sensor ERROR: When this plugin starts, a SELECT query is run to find the sensor id for the currently running sensor. If the sensor id is not found, the plugin will run an INSERT query to insert the proper data and generate a new sensor id. Then a SELECT query is run to get the newly allocated sensor id. If that fails then this error message is generated. Some possible causes for this error are: * the user does not have proper INSERT or SELECT privileges * the sensor table does not exist If you are _absolutely_ certain that you have the proper privileges set and that your database structure is built properly please let me know if you continue to get this error. You can contact me at (roman () danyliw com). Fatal Error, Quitting.. C:\Snort\bin> Here is output from the MySql Database C:\mysql\bin>mysql Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 28 to server version: 3.23.40-nt Type 'help;' or '\h' for help. Type '\c' to clear the buffer. mysql> USE SNORT Database changed mysql> SHOW TABLES; +------------------+ | Tables_in_SNORT | +------------------+ | acid_ag | | acid_ag_alert | | acid_event | | acid_ip_cache | | data | | detail | | encoding | | event | | icmphdr | | iphdr | | opt | | reference | | reference_system | | schema | | sensor | | sig_class | | sig_reference | | signature | | tcphdr | | udphdr | +------------------+ 20 rows in set (0.01 sec) mysql> SELECT * FROM sensor; +-----+--------------------------------------------------------------+-- -------- -------------------------------------------+--------+--------+---------- + | sid | hostname | interface | filter | detail | encoding | +-----+--------------------------------------------------------------+-- -------- -------------------------------------------+--------+--------+---------- + | 1 | DATADEV:DevicePacket_{3250B567-F55D-4B8C-AEF4-14298A26FA3B} | DevicePacket_{3250B567-F55D-4B8C-AEF4-14298A26FA3B} | NULL | 1 | 0 | +-----+--------------------------------------------------------------+-- -------- -------------------------------------------+--------+--------+---------- + 1 row in set (0.00 sec) mysql> GRANT INSERT,SELECT on sensor to snort; Query OK, 0 rows affected (0.00 sec) mysql> Thank you all Cody Smith CCNA, MCP Network Administrator Cypress Software Systems Phone: (817)514-6777x111 Csmith () go-cypress com
Current thread:
- Error In snort HELP!!! Cody R. Smith (Apr 16)