Snort mailing list archives
Re: snort ?> mysql
From: "Roger Brown" <roger.brown () intervoice com>
Date: Wed, 20 Aug 2003 12:02:46 -0500
Nothing in the logs that stands out to me - since snort is starting up ok I'm not sure what to be looking for.
Ralf Spenneberg <lists () spenneberg org> 08/15/03 01:00AM >>>
Am Fre, 2003-08-15 um 01.08 schrieb Roger Brown:
From the snort box I did a > mysql -u snort -p --host=10.10.10.10 and it connected ok From the mysql database server I did a $ echo "SELECT count(*) FROM event" | snort -u root -p and got a count (*) of 0 Below is a insert of my snort.conf file output database: log, mysql, user=snort password=mypass dbname=snort host=10.10.10.10
Any hint in the snort logs when starting up? Cheers, Ralf -- Ralf Spenneberg RHCE, RHCX Book: Intrusion Detection für Linux Server http://www.spenneberg.com IPsec-Howto http://www.ipsec-howto.org Honeynet Project Mirror: http://honeynet.spenneberg.org ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: snort ?> mysql Roger Brown (Aug 20)
- Re: snort ?> mysql Edin Dizdarevic (Aug 22)
- <Possible follow-ups>
- Re: snort ?> mysql Roger Brown (Aug 25)
- Re: snort ?> mysql Erek Adams (Aug 26)
- Re: snort ?> mysql Edin Dizdarevic (Aug 25)