Snort mailing list archives
snort not logging to mysql
From: Cary Mathews <scattered () babel acu edu>
Date: Wed, 23 Jan 2002 13:09:32 -0600 (CST)
(yes I read the FAQ) I'm running snort-1.8.3 on a BSD/OS 4.x i383 machine. A1: You did not set up the database plugin in your configuration file. ==>from my snort.conf: output database: log, mysql, user=snort password=*** dbname=snort host=localhost A2: You are using an older database schema, and should update it by running the create scripts from the /contrib directory. ==>I did this. A3: You are using a command line option that overrides what you have in your configuration file. This is most often -A or -s. NOTE: If you wish to log to syslog as well, specify so in your configuration file rather then the command line. ==>my command line options (will eventually want to run as a daemon): /acu/snort/mysql/bin/snort -P 1514 -c /acu/snort/rules/snort.conf A4: There is a problem with your database configuration itself. Make sure the user you specify has the correct permissions, or that the database is even up and running. ==>I've inserted tables, selected items from the table, and deleted tables (none of the ones created by the create_mysql script). And mysql is running, because I was able to to the creation and selects and inserts. I even tried recompiling the program using these options (I'm using BSD/OS 4.x): ./configure --with-mysql=/usr/contrib/lib/mysql --prefix=/acu/snort/mysql make make install But the output of the startup is: database: compiled support for ( ) database: configured to use mysql database: mysql support is not compiled in this copy Check your configuration file to be sure you did not mis-spell "mysql". If you did not, you will need to reconfigure and recompile ensuring that you have set the correct options to the configure script. Type "./configure --help" to see options for the configure script. Fatal Error, Quitting.. Any help will be greatly appreciated. --Cary PS - cc: please, as my subscribe message got stuck because of administriva (I put subscribe in the subject and body :( ) _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort not logging to mysql Cary Mathews (Jan 23)
- <Possible follow-ups>
- RE: snort not logging to mysql Steve Halligan (Jan 23)
- RE: snort not logging to mysql Cary Mathews (Jan 23)