RE: Unable to connect to snort server by the sensor

["Harper, Patrick" <Patrick.Harper () phns com>]

 it outputted (using password: NO) try adding the password.  It looks
like a permissions issue to me.  You seem to have the right ports open,
and mysql is running.

-----Original Message-----
From: Jitendra Gupta [mailto:jitendrakrgupta_snort () yahoo co in] 
Sent: Thursday, April 07, 2005 9:46 AM
To: Harper, Patrick; snort Mailing List
Subject: RE: [Snort-users] Unable to connect to snort server by the
sensor

Dear Sir,
   Thanks for your reply.You are correct.When I do :-

mysql -h 10.0.0.5 -u snort -p

it gives :-

ERROR 1045 (28000): Access denied for user
'snort'@'10.0.0.2' (using password: NO)

Please could you suggest any remedy for it.
Waiting eagerly for your reply,
thanking you,
Jitendra

--- "Harper, Patrick" <Patrick.Harper () phns com> wrote:
> Looks like you can log in as root but try it with
> -usnort -p<password> 
>
> -----Original Message-----
> From: snort-users-admin () lists sourceforge net
> [mailto:snort-users-admin () lists sourceforge net] On
> Behalf Of Jitendra
> Gupta
> Sent: Thursday, April 07, 2005 9:15 AM
> To: Joshua Berry; snort Mailing List
> Subject: [Snort-users] Unable to connect to snort
> server by the sensor
>
> Hello List,
>           I have installed Snort server on Mandrake
> 9.2 and one sensor at Red Hat Linux 9.I have changed
> my sensors snort.conf's ouput pluggin line to 
>
> output database: log, mysql, user=snort
> password=snort
> dbname=snort host=10.0.0.5
>
> server's ip=10.0.0.5
> sensors ip=10.0.0.2
>
> I have also updated mysql databases's "users" table
> with an entry
> host=10.0.0.2,user=snort,password=snort
> and all following options set to yes at the
> server.But
> when I did 
>
>  snort -dev -c /etc/snort.conf
>
> I get the following :-
>
> database: compiled support for ( mysql )
> database: configured to use mysql
> database:          user = snort
> database: password is set
> database: database name = snort
> database:          host = 10.0.0.5
> Node unique name is: 10.0.0.2
> database:   sensor name = 10.0.0.2
> ERROR: database: mysql_error: Access denied for user
> 'snort'@'10.0.0.2' (using password: YES)
> Fatal Error, Quitting..
>
> But I can access the mysql server by doing :-
>
> mysql -h 10.0.0.5
> mysql>
>
> Please help,
> Jitendra
________________________________________________________________________
> Yahoo! India Matrimony: Find your life partner
> online
> Go to: http://yahoo.shaadi.com/india-matrimony
-------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT
> Products from real users.
> Discover which products truly live up to the hype.
> Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or
> unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
> -----------------------------------------
> Disclaimer:  This electronic message, including any
> attachments, is
> confidential and intended solely for use of the
> intended recipient(s). This
> message may contain information that is privileged
> or otherwise protected
> from disclosure by applicable law. Any unauthorized
> disclosure,
> dissemination, use or reproduction is strictly
> prohibited. If you have
> received this message in error, please delete it and
> notify the sender
> immediately.

________________________________________________________________________
Yahoo! India Matrimony: Find your life partner online
Go to: http://yahoo.shaadi.com/india-matrimony




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users