Snort - MySql - ACID and multiple sensors

[bhayes () unlnotes unl edu]

I am having some trouble getting snort to log to a mysql server.  One
remote snort host did properly connect to the mysql host once. ACID did
correctly identify the sensor ID and its interface once. However, the
database did not pick up any alerts, even after using a nework-based
vulnerability scanner.

The sensor has subsequently refused to connect to the mysql host.  Snort
complains that it is unable to connect to the Mysql server and then times
out.

Setting up the sensor and the mysql server as standalone snort hosts works
well.  Snort logs everyhing from the proper interface.

Any ideas of where to look for this problem?

I am not yet subscribed to the list, so please respond directly.

Many thanks!

Bill...


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users