RE: DB SNORT

["Shawn Kottke" <skottke () DATALINK com>]

Check your acid config file "acid_conf.php" which should be in your
apache directory "htdocs/acid" (ie. /apache/install/dir/htdocs/acid).
Check your settings for "alert_dbname", "alert_host", "alert_port",
"alert_user", "alert_password". The dbname, host, user, and password
setting should have something at a minimum. Is your correct dbname
setup, correct user and password setup? "alert_host" can be equal to
"localhost" since you are using the same machine to host the database.

Go to your mysql directory (typically /usr/local/mysql/data) and see if
you have a "snort" directory or whatever you called the database. Inside
that directory are all of the files for you snort database. Do an "ll" a
few times and see if any of them are growing in size, in particular the
"data.MYD" file.
> From the command line:
cd /usr/local/mysql/data
ls snort
cd snort
ll data*


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of
Israel_Guadalupe_Lopez_Mascorro../Administracion/Jalisco () jalisco gob mx
Sent: Monday, February 23, 2004 2:55 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] DB SNORT





Hi
Sorry but I don`t kwon how I check if snort is logging to the db or if
acid has
connection to that db

Could help me with that

Thanks


 

             "Fred McFeeters"

             <nfolink@hotmail.

             com>
Para 
             Enviado por:
Israel_Guadalupe_Lopez_Mascorro../A 
             snort-users-admin
dministracion/Jalisco<Israel_Guadal 
             @lists.sourceforg
upe_Lopez_Mascorro../Administracion 
             e.net                     /Jalisco () jalisco gob mx>,

 
<snort-users () lists sourceforge net> 
 
cc 
             23/02/2004 12:12

 
Asunto 
                                       RE: [Snort-users] ACID

 

 

 

 

 

 





Have you checked that snort is logging to the db? And that acid has
connection to that db?

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of
Israel_Guadalupe_Lopez_Mascorro../Administracion/Jalisco () jalisco gob mx
Sent: Monday, February 23, 2004 11:39 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] ACID





Hi I installed snort ,php,acid ,mysql and apache in RH9 The installation
was complete and Ican see the ACID page like in the manual`s example but
the page does not have activity
Do I have to do something else?
Thanks



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
 http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id56&alloc_id438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users