Snort mailing list archives
RE: MySql + Snort config errors (yet again)
From: "robert schwartz" <robert () mrsquirrel com>
Date: Thu, 8 Jan 2004 13:30:28 -0800
Might try this on the db server: $ mysql -u root p mysql>GRANT INSERT, SELECT on snort.* to snort@192.168.1.16 IDENTIFIED BY 'sentinix'; Forget off the top of my head if the password requires '' or not though... But you get the idea. Don't use special characters in this password if you want it to work. Every sensor needs a grant rule for it's snort@hostname btw.
-----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of M. Morgan Sent: Thursday, January 08, 2004 12:46 PM To: Snort List Subject: [Snort-users] MySql + Snort config errors (yet again) Hello all, As many others have done I'm trying to setup a remote Snort sensor that will report to a central mysql database. I'm using: snort + snortcenter + mysql + acid on two boxes: 192.168.1.199 <sql server> 192.168.1.16 <remote snort> both boxes have the following installed. snort snortcenter mysql webmin acid nagios Both snort installs work fine if I direct them to log to thier local mysql databases (localhost) The error appears when I try and redirect the output of sensor (x.16) to the mysql server (x.199), it is as follows: Btw: im using the following output plugin: output database: alert, mysql, user=snort password=sentinix dbname=snort host=192.168.1.199 port=3306 sensor_name=[AUTO] ERROR: database: mysql_error: Access denied for user: 'snort@192.168.1.16' (Using password: YES) Fatal Error, Quitting.. database: compiled support for ( mysql ) database: configured to use mysql database: user = snort database: password is set database: database name = snort database: host = 192.168.1.199 database: port = 3306 database: sensor name = Ren I know this is a mysql access error, Ive used the webmin mysql server plugin to try and configure the mqsql "user" and "database" permissions every way I can think of and I still get the error. Ive googled it, Ive RTFM'ed it, Ive been working on it for days and Im on a time schedule...Im getting frantic here ;) I know this has been done successfully but I also realize this is my first attempt with mysql and it isnt working for me. I would greatly appreciate any and all help resolving this! Thanks, Michael ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.> html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listin> fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- MySql + Snort config errors (yet again) M. Morgan (Jan 08)
- RE: MySql + Snort config errors (yet again) robert schwartz (Jan 08)
- <Possible follow-ups>
- Re: MySql + Snort config errors (yet again) Leonard Miller (Jan 08)