Snort mailing list archives
RE: HSC can not connect to snort database!
From: "Jeff Dell" <jdell () activeworx com>
Date: Thu, 18 Nov 2004 08:33:06 -0500
If you would like to ignore the ip address in MySQL, you can add the ip of % or %.domain.com. For more information, check out: http://dev.mysql.com/doc/mysql/en/Connection_access.html Cheers, Jeff _____ From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of dogfart big Sent: Thursday, November 18, 2004 8:13 AM To: discussion () snortsam net; snort-users () lists sourceforge net Subject: [Snort-users] HSC can not connect to snort database! Hi I setup all my snort + snortsam + mysql + acid infrastructure on my Linux box. I find inreresting tool for analyzing snort logs at activex.org. Honeyput Security Console (HSC) I set ip tables on my linux and allow mysql 3306 port from my winxp station. I try to connect on snort database but I get an error. I sniff the traffic and see that hsc send "username + @computerdomainname" instead of username and of course access for this user is denied.Which I can see from decoded communication. I know that i can create user "username + @computerdomainname" and give a grant to snort database but is there option to send just "username" that i put in the first dialogue box? I must recreate user every time I change my Win XP computer name. Anyone solv this? Regards Dogfartbig __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Current thread:
- HSC can not connect to snort database! dogfart big (Nov 18)
- RE: HSC can not connect to snort database! Jeff Dell (Nov 18)