Snort mailing list archives

RE: Not loggin to MySQL Database


From: "Vernon Webb" <vernon () comp-wiz com>
Date: Tue, 1 Jun 2004 09:56:36 -0400

Sorry I forgot to mention that I had installed this on a Fedora box and used rpms to install. I Installed a different 
version and it is now working.

Thanks for the info.

---------- Original Message -----------
From: "Harper, Patrick" <patrick.harper () phns com> 
To: "Vernon Webb" <vernon () comp-wiz com>, <snort-users () lists sourceforge net> 
Sent: Tue, 1 Jun 2004 08:48:47 -0500 
Subject: RE: [Snort-users] Not loggin to MySQL Database 

What are you running snort on?   

What permissions did you give to the user you listed in the snort.conf 
file to log to the database?  Is snort even started (on *nix ps -ef|grep 
snort)?  Is mysql running? 

Type snort -c /etc/snort/snort.conf (or what ever the path to your 
snort.conf is)  this will give you a little more to go on. 

Since it has stopped logging to /var/log/snort dir I am betting you have 
something wrong with the output line.  Check it out with the command 
above (snort -c /etc/snort/snort.conf) and see if it tells you that. 

-----Original Message----- 
From: Vernon Webb [mailto:vernon () comp-wiz com] 
Sent: Friday, May 28, 2004 5:37 PM 
To: snort-users () lists sourceforge net 
Subject: [Snort-users] Not loggin to MySQL Database 

I hate doing this as I know how much everyone hates newbie question, but 
I am new to SNORT and cannot get SNORT to log to the MySQL database on 
my box. 
As far as I can tell all I need do is add the correct user name and 
password to the database line in the SNORT.conf file. However when I add 
this line it doesn't log to the database and it stops loggin the log 
files it logged to prior. Is there something else I am missing here? Any 
ideas on debugging this? 

Thanks. 

------------------------------------------------------- 
This SF.Net email is sponsored by: Oracle 10g Get certified on the 
hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click 
_______________________________________________ 
Snort-users mailing list 
Snort-users () lists sourceforge net 
Go to this URL to change user options or unsubscribe: 
https://lists.sourceforge.net/lists/listinfo/snort-users 
Snort-users list archive: 
http://www.geocrawler.com/redir-sf.php3?list=snort-users 

Disclaimer: 
This electronic message, including any attachments, is confidential and intended solely for use of the intended 
recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by 
applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have 
received this message in error, please delete it and notify the sender immediately. 
------- End of Original Message -------



Current thread: