Snort mailing list archives
Potential MySQL problem? [RMC-N2XAG14]
From: "Romulo M. Cholewa" <rmc () rmc eti br>
Date: Sun, 23 Feb 2003 13:37:37 -0300
Hail, I'm running into a problem. When I restart a specific sensor, I get snort error messages like this: COMPUTERNAME xxxxx TIME 2/23/2003 1:24:06 PM MESSAGE FATAL ERROR: database: mysql_error: Host 'xxxxx.com' is blocked because of many connection errors. Unblock with 'mysqladmin flush-hosts' Of course, running the command suggested always solves the problem. Since the snort service is configured to recover always, and every minute, it generates lots of logs but does not start the snort service since the error condition is still present. My intention is to automate the recovery process unattended. My question is: since everytime it happens the sensor is disabled, is there any implications of running the command 'mysqladmin flush-hosts' scheduled, say, every 5 minutes ? Thanks in advance, Romulo M. Cholewa Home : http://www.rmc.eti.br Forum: http://zeus.rmc.eti.br/forum PGP Keys Available @ website. "Without facts, the decision cannot be made logically. You must rely on your human intuition." -- Spock ------------------------------------------------------- This SF.net email is sponsored by: SlickEdit Inc. Develop an edge. The most comprehensive and flexible code editor you can use. Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial. www.slickedit.com/sourceforge _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Potential MySQL problem? [RMC-N2XAG14] Romulo M. Cholewa (Feb 23)