RE: [SPAM] - RE: Unable to connect to snort server by the sensor - Email found in subject

[Jitendra Gupta <jitendrakrgupta_snort () yahoo co in>]

The Command line was :-
root]# mysql -h 10.0.0.5 -u snort -p (Enter key
pressed)
Enter password: (password entered here)
ERROR 1045 (28000): Access denied for user
'snort'@'10.0.0.2' (using password: NO)

jitendra

 --- Marc Hering <mhering () reval com> wrote: 
> The command line was:
> snort-2.3.2]# mysql -h 10.0.0.5 -u snort -p Enter
> password:
>
> Or was it
> snort-2.3.2]# mysql -h 10.0.0.5 -u snort -p
>
> ??
>
> -----Original Message-----
> From: snort-users-admin () lists sourceforge net
> [mailto:snort-users-admin () lists sourceforge net] On
> Behalf Of Jitendra
> Gupta
> Sent: Thursday, April 07, 2005 11:38 AM
> To: Harper, Patrick; snort Mailing List
> Subject: [SPAM] - RE: [Snort-users] Unable to
> connect to snort server by
> the sensor - Email found in subject
>
> Actually the whole command was :-
>
> snort-2.3.2]# mysql -h 10.0.0.5 -u snort -p Enter
> password:
> ERROR 1045 (28000): Access denied for user
> 'snort'@'10.0.0.2' (using
> password: YES)
>
>
> mysql is running on the server :-
> snort-2.3.2]# ps -A|grep sql
>  4691 ?        00:00:00 mysqld_safe
>  4711 ?        00:00:00 mysqld
>  4712 ?        00:00:00 mysqld
>  4713 ?        00:00:00 mysqld
>  4714 ?        00:00:00 mysqld
>  4715 ?        00:00:00 mysqld
>  4716 ?        00:00:00 mysqld
>  4717 ?        00:00:00 mysqld
>  4718 ?        00:00:00 mysqld
>  4719 ?        00:00:00 mysqld
>  4720 ?        00:00:00 mysqld
>
>
>
>
>  --- "Harper, Patrick" <Patrick.Harper () phns com>
> wrote: 
> >  it outputted (using password: NO) try adding the
> > password.  It looks
> > like a permissions issue to me.  You seem to have
> > the right ports open,
> > and mysql is running.
> >
> > -----Original Message-----
> > From: Jitendra Gupta
> > [mailto:jitendrakrgupta_snort () yahoo co in] 
> > Sent: Thursday, April 07, 2005 9:46 AM
> > To: Harper, Patrick; snort Mailing List
> > Subject: RE: [Snort-users] Unable to connect to
> > snort server by the
> > sensor
> >
> > Dear Sir,
> >    Thanks for your reply.You are correct.When I do
> > :-
> >
> > mysql -h 10.0.0.5 -u snort -p
> >
> > it gives :-
> >
> > ERROR 1045 (28000): Access denied for user
> > 'snort'@'10.0.0.2' (using password: NO)
> >
> > Please could you suggest any remedy for it.
> > Waiting eagerly for your reply,
> > thanking you,
> > Jitendra
> >
> > --- "Harper, Patrick" <Patrick.Harper () phns com>
> > wrote:
> > > Looks like you can log in as root but try it
> with
> > > -usnort -p<password> 
> > >
> > > -----Original Message-----
> > > From: snort-users-admin () lists sourceforge net
> > > [mailto:snort-users-admin () lists sourceforge net]
> > On
> > > Behalf Of Jitendra
> > > Gupta
> > > Sent: Thursday, April 07, 2005 9:15 AM
> > > To: Joshua Berry; snort Mailing List
> > > Subject: [Snort-users] Unable to connect to
> snort
> > > server by the sensor
> > >
> > > Hello List,
> > >           I have installed Snort server on
> > Mandrake
> > > 9.2 and one sensor at Red Hat Linux 9.I have
> > changed
> > > my sensors snort.conf's ouput pluggin line to 
> > >
> > > output database: log, mysql, user=snort
> > > password=snort
> > > dbname=snort host=10.0.0.5
> > >
> > > server's ip=10.0.0.5
> > > sensors ip=10.0.0.2
> > >
> > > I have also updated mysql databases's "users"
> > table
> > > with an entry
> > > host=10.0.0.2,user=snort,password=snort
> > > and all following options set to yes at the
> > > server.But
> > > when I did 
> > >
> > >  snort -dev -c /etc/snort.conf
> > >
> > > I get the following :-
> > >
> > > database: compiled support for ( mysql )
> > > database: configured to use mysql
> > > database:          user = snort
> > > database: password is set
> > > database: database name = snort
> > > database:          host = 10.0.0.5
> > > Node unique name is: 10.0.0.2
> > > database:   sensor name = 10.0.0.2
> > > ERROR: database: mysql_error: Access denied for
> > user
> > > 'snort'@'10.0.0.2' (using password: YES)
> > > Fatal Error, Quitting..
> > >
> > > But I can access the mysql server by doing :-
> > >
> > > mysql -h 10.0.0.5
> > > mysql>
> > >
> > > Please help,
> > > Jitendra
________________________________________________________________________
> > > Yahoo! India Matrimony: Find your life partner
> > > online
> > > Go to: http://yahoo.shaadi.com/india-matrimony
-------------------------------------------------------
> > > SF email is sponsored by - The IT Product Guide
> > > Read honest & candid reviews on hundreds of IT
> > > Products from real users.
> > > Discover which products truly live up to the
> hype.
> > > Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or
> > > unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > > -----------------------------------------
> > > Disclaimer:  This electronic message, including
> > any
> > > attachments, is
> > > confidential and intended solely for use of the
> > > intended recipient(s). This
> > > message may contain information that is
> privileged
> > > or otherwise protected
> > > from disclosure by applicable law. Any
> > unauthorized
> > > disclosure,
> > > dissemination, use or reproduction is strictly
> > > prohibited. If you have
> > > received this message in error, please delete it
> > and
> > > notify the sender
> > > immediately.
=== message truncated === 

________________________________________________________________________
Yahoo! India Matrimony: Find your life partner online
Go to: http://yahoo.shaadi.com/india-matrimony


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users