Snort mailing list archives
multiple sensors
From: David Bianco <bianco () jlab org>
Date: Thu, 7 Mar 2002 12:57:26 -0500
Luo, Feng (Exchange) writes:
I have got snort+mysql+acid to work on one window sensor, I am thinking about having another sensor on another windows,. I installed snort on second machine, modified the snort.conf which has a output plug in " output database: log, mysql, user=snort password=snort dbname=snort host=the name of machine where mysql is", the mysql_error I got is access denied for user: 'snort@second sensor'. Do I have to install mysql on my second sensor? How about ACID, again?
Sounds like you just need to do something like the following on your mysql server box: % echo "grant INSERT,SELECT on snort.* to snort@sensor2 \ IDENTIFIED BY 'snort' | mysql -u root -p MySQL considers the same usernames on two different hosts to be two different users. Replace sensor2 with your second sensor's hostname and you should be good to go. David -- David J. Bianco, GSEC <bianco () jlab org> Thomas Jefferson National Accelerator Facility The views expressed herein are soley those of the author and not those of SURA/Jefferson Lab or the US DOE. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Multiple sensors Mike Arrison (Mar 06)
- Rule set Query skill2die4 (Mar 06)
- Re: Multiple sensors Erek Adams (Mar 06)
- <Possible follow-ups>
- multiple sensors Luo, Feng (Exchange) (Mar 07)
- Re: multiple sensors Erek Adams (Mar 07)
- multiple sensors David Bianco (Mar 07)