Re: snort 2.8.6.0 inline (remote sensor) won't connect to mysqld

[Joel Esler <jesler () sourcefire com>]

Possibly. Check your alerts.

However, what you should do, especially in inline mode, is from Snort,
log to unified.

Then use barnyard to read the unified files and input them into the database.

On Tuesday, May 11, 2010, Lawrence R. Hughes, Sr. <lhughes () safemedia com> wrote:
> Hi,
>
> We have snort 2.8.6.0 inline working with a local
> snort database and reporting works.
> When we try to have the same sensor now
> connect to a remote snort mysq database, it won't connect?
>
> We have other snort 2.8.6.0 (non-inline) sensors
> connect to the same mysql server and they work fine.
> All permissions have been entered into the mysql
> database to allow that remote inline sensor to connect.
>
> When we run snort 2.8.6.0 in the non-inline mode on
> the same machine, it can connect to the remote database?
>
> Is the inline sensor blocking our
> connection to the database?
>
>  Thanks,
> Larry

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users