Re: snort not logging to the database

[twig les <twigles () yahoo com>]

Could you elaborate a little?  This sounds like a
workaround to a problem that no one should have.  What
versions of everything, what errors etc....  The
reason I asked Edu to check mysql's status is that
I've seen people have a problem where they send a
query to their database and it shuts down the client
and server.  I've personally had snort die quietly on
me when tinkering, then wondered why my database
wasn't getting alerts :).


--- Thierry <lenaig () wanadoo fr> wrote:
> Hi,
> I had, in the past, the same problem, and i found
> that when you are running 
> in daemon mode, snort don't log to mysql...
> Now, i 'am running snort like that : snort -c
> etc/snort.conf &
> thierry
>
>
> 21/11/2002 19:10:43, twig les <twigles () yahoo com> a
> écrit:
>
> > Since youre on a nix box, try a 'ps aux|grep mysql'
> to
> > make sure it's there (or ps -efa on slowaris).  If
> > it's up try connecting to it manually.  If you can
> > then check your snort.conf settings.
> >
> > --- Edu Sananselmo <esananselmo () albasoft com>
> wrote:
> > > It seems as it snort didn't want to log alerts to
> > > the database (it does log to
> > > /var/snort/alert), and I swear I haven't touched
> > > anything. I also ran snort with
> > > the -T option and everything goes well, but when
> I
> > > run it in daemon mode,
> > > there's no connection to the database. When I
> click
> > > on some links on the acid
> > > page, I get messages saying that there's no
> > > connection to the database, so I'm
> > > really lost.
> > > What's wrong?
> > > Thanks in advance.
>
> -------------------------------------------------------
> > > This sf.net email is sponsored by:ThinkGeek
> > > Welcome to geek heaven.
> > > http://thinkgeek.com/sf
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or
> > > unsubscribe:
>
> https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
>
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > =====
>
> -----------------------------------------------------------
> > If you give a man a fish, he can eat for a day
> > If you bludgeon him to death, you can eat the fish
> yourself                       
>
> -----------------------------------------------------------
> > __________________________________________________
> > Do you Yahoo!?
> > Yahoo! Mail Plus ? Powerful. Affordable. Sign up
> now.
> > http://mailplus.yahoo.com
>
> -------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or
> unsubscribe:
>
> https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
>
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
>
>
> --
> Thierry Stephan 


=====
-----------------------------------------------------------
If you give a man a fish, he can eat for a day
If you bludgeon him to death, you can eat the fish yourself                       
-----------------------------------------------------------

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus – Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users