Snort mailing list archives
Snort Version 2.0.1-ODBC-MySQL-FlexRESP-WIN32 (Build 88) - MySQL Error
From: "James Haworth" <james.haworth () eduserv org uk>
Date: Tue, 2 Sep 2003 13:58:04 +0100
Hi. When I start Snort, I get the following error. Has anybody seen this error, or know how to resolve it as I am getting it on every box that I install it on? Regards James Haworth C:\Snort\bin>snort -i 2 -c c:\snort\etc\snort.conf -v Running in IDS mode Log directory = log Initializing Network Interface \ --== Initializing Snort ==-- Initializing Output Plugins! Decoding Ethernet on interface \ Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file c:\snort\etc\snort.conf +++++++++++++++++++++++++++++++++++++++++++++++++++ Initializing rule chains... No arguments to frag2 directive, setting defaults to: Fragment timeout: 60 seconds Fragment memory cap: 4194304 bytes Fragment min_ttl: 0 Fragment ttl_limit: 5 Fragment Problems: 0 Self preservation threshold: 500 Self preservation period: 90 Suspend threshold: 1000 Suspend period: 30 Stream4 config: Stateful inspection: ACTIVE Session statistics: INACTIVE Session timeout: 30 seconds Session memory cap: 8388608 bytes State alerts: INACTIVE Evasion alerts: ACTIVE Scan alerts: ACTIVE Log Flushed Streams: INACTIVE MinTTL: 1 TTL Limit: 5 Async Link: 0 State Protection: 0 Self preservation threshold: 50 Self preservation period: 90 Suspend threshold: 200 Suspend period: 30 Stream4_reassemble config: Server reassembly: INACTIVE Client reassembly: ACTIVE Reassembler alerts: ACTIVE Ports: 21 23 25 53 80 110 111 143 513 1433 Emergency Ports: 21 23 25 53 80 110 111 143 513 1433 http_decode arguments: Unicode decoding IIS alternate Unicode decoding IIS double encoding vuln Flip backslash to slash Include additional whitespace separators Ports to decode http on: 80 rpc_decode arguments: Ports to decode RPC on: 111 32771 alert_fragments: INACTIVE alert_large_fragments: ACTIVE alert_incomplete: ACTIVE alert_multiple_requests: ACTIVE telnet_decode arguments: Ports to decode telnet on: 21 23 25 119 Using LOCAL time database: compiled support for ( mysql odbc ) database: configured to use mysql database: user = root database: database name = snort database: host = localhost Node unique name is: EO52:\ database: sensor name = EO52:\ database: mysql_error: You have an error in your SQL syntax. Check the manual t hat corresponds to your MySQL server version for the right syntax to use near '\ ' AND detail = '1' AND encoding = '0' AND filter IS NULL' at l database: mysql_error: You have an error in your SQL syntax. Check the manual t hat corresponds to your MySQL server version for the right syntax to use near '\ ','1','0', '0')' at line 1 SQL=INSERT INTO sensor (hostname, interface, detail, encoding, last_cid) VALUES ('EO52:\','\','1','0', '0') database: mysql_error: You have an error in your SQL syntax. Check the manual t hat corresponds to your MySQL server version for the right syntax to use near '\ ' AND detail = '1' AND encoding = '0' AND filter IS NULL' at l database: Problem obtaining SENSOR ID (sid) from snort->sensor ERROR: When this plugin starts, a SELECT query is run to find the sensor id for the currently running sensor. If the sensor id is not found, the plugin will run an INSERT query to insert the proper data and generate a new sensor id. Then a SELECT query is run to get the newly allocated sensor id. If that fails then this error message is generated. Some possible causes for this error are: * the user does not have proper INSERT or SELECT privileges * the sensor table does not exist If you are _absolutely_ certain that you have the proper privileges set and that your database structure is built properly please let me know if you continue to get this error. You can contact me at (roman () danyliw com). Fatal Error, Quitting.. Snort Interfaces Available Command (snort -W) C:\Snort\bin>snort -W -*> Snort! <*- Version 2.0.1-ODBC-MySQL-FlexRESP-WIN32 (Build 88) By Martin Roesch (roesch () sourcefire com, www.snort.org) 1.7-WIN32 Port By Michael Davis (mike () datanerds net, www.datanerds.net/~mike) 1.8 - 2.0 WIN32 Port By Chris Reid (chris.reid () codecraftconsultants com) Interface Device Description ------------------------------------------- 1 \Device\Packet_NdisWanIp (NdisWan Adapter) 2 \Device\Packet_{165D21FE-FB6F-4BFE-80C0-C783B23164BE} (SiS NIC SISNIC) ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort Version 2.0.1-ODBC-MySQL-FlexRESP-WIN32 (Build 88) - MySQL Error James Haworth (Sep 03)
- RE: Snort Version 2.0.1-ODBC-MySQL-FlexRESP-WIN32 (Build 88) - MySQL Error Michael Steele (Sep 03)
- Re: Snort Version 2.0.1-ODBC-MySQL-FlexRESP-WIN32 (Build 88) - MySQL Error Erek Adams (Sep 04)
- RE: Snort Version 2.0.1-ODBC-MySQL-FlexRESP-WIN32 (Build 88) - MySQL Error Michael Steele (Sep 04)