Snort mailing list archives
Snort and MySQL
From: "FAzle Rokib" <rokib () itsits com>
Date: Sun, 29 Aug 2004 21:16:13 -0400
Try this: mysql> Grant All On snort.* to snort@localhost<mailto:snort@localhost>; or (if you have a password for snort user) mysql> Grant All On snort.* to snort@localhost<mailto:snort@localhost> Identified By 'password'; [****If you have a password for snort user, you must use Identified By clause] Message: 1 From: "Michael Steele" <michaels () winsnort com<mailto:michaels () winsnort com>> To: <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>> Subject: RE: [Snort-users] Snort and MySQL Date: Sun, 29 Aug 2004 11:52:02 -0700 Looks like you have no access to the Snort database. Go back and make SURE you can access the database with the credentials that you have in the snort.conf file on the MySQL output database line. Kindest regards, Michael... WINSNORT.com Management Team Member -- Pick up your FREE Windows or UNIX Snort installation guides mailto:support () winsnort com<mailto:support () winsnort com> Website: http://www.winsnort.com<http://www.winsnort.com/> Snort: Open Source Network IDS - http://www.snort.org<http://www.snort.org/>
-----Original Message----- From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net> [mailto:snort-users- admin () lists sourceforge net<mailto:admin () lists sourceforge net>] On Behalf Of Robert Spangler Sent: Sunday, August 29, 2004 10:35 AM To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net> Subject: [Snort-users] Snort and MySQL Hello, I seem to be having a problem setting up snort to use MySQL database. When I run 'snort -c /etc/snort/snort.conf' I get the following: =================================================== Running in IDS mode Log directory = /var/log/snort Initializing Network Interface eth0 --== Initializing Snort ==-- Initializing Output Plugins! Decoding Ethernet on interface eth0 Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file /etc/snort/snort.conf +++++++++++++++++++++++++++++++++++++++++++++++++++ Initializing rule chains... database: compiled support for ( MySQL ) database: configured to use MySQL database: user = snort database: database name = snort database: host = localhost database: sensor name = 192.168.1.100 ERROR: database: MySQL_error: Access denied for user: 'snort@localhost'<mailto:'snort@localhost'> (Using password: NO) Fatal Error, Quitting.. =================================================== snort.conf has the following entry: =================================================== output database: log, MySQL, user=snort, password=******** dbname=snort host=localhost =================================================== MySQL was setup using this line for snort: =================================================== grant INSERT,SELECT on root.* to snort@localhost<mailto:snort@localhost>; SET PASSWORD FOR snort@localhost=PASSOWRD('********'<mailto:snort@localhost=PASSOWRD('********'>); grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort@localhost<mailto:snort@localhost>; grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort; =================================================== This was a step by step guide I had followed to set this up. I'm hoping someone might be able to see what I'm missing. Thnx -- Regards Robert Smile..... It increases your face value. ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click> _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net> Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users> Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users>
--__--__-- Message: 2 From: "pfeito" <pfeito () netcabo pt<mailto:pfeito () netcabo pt>> To: "'Keith W. McCammon'" <mccammon () gmail com<mailto:mccammon () gmail com>>, <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>, <hackerwacker () cybermesa com<mailto:hackerwacker () cybermesa com>> Subject: RE: [Snort-users] Slow down TCP connections Date: Sun, 29 Aug 2004 20:13:54 +0100 I don't really have a final purpose, I'm just digging out what proactive stuff there is out there for Snort. I don't need it, I just thought of it, as an example of proactive functionality and wanted to find out if there is such thing. I guess it is kind of stupid.... although it could be useful in an snort+honeypot scenario. Don't really put much though in it.
Why are you seeking and IDS to do traffic queueing ?
No. That would be like trying to cut a steak with a spoon :P !
-----Original Message----- From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net> [mailto:snort-users- admin () lists sourceforge net<mailto:admin () lists sourceforge net>] On Behalf Of Keith W. McCammon Sent: domingo, 29 de Agosto de 2004 18:14 To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net> Subject: Re: [Snort-users] Slow down TCP connectionsRight know, I've just compiled and installed snort 2.2.0 with flexresp2 support. I'm about to test flexresp2 capabilities, but It seems to havenosupport for slowing down TCP connections (i.e. for slowing down TCPScansfor instance...)Why would Snort want to "slow down" a TCP scan? Snort will catch it, and under certain circumstances, flexresp2 can reset those connections. That's pretty much the extent of Snort's involvement.Do you know any plug-in that allows Snort to slow down TCP connectionsspeed(i.e. resize TCP window size) ?No. What would you accomplish by doing this? Either block the traffic or don't. Slowing it down won't really get you anywhere (it'll just take the attacker longer to do the same thing). ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click> _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net> Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users> Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users>
--__--__-- Message: 3 From: "Jim Hendrick" <jrhendri () maine rr com<mailto:jrhendri () maine rr com>> To: "'pfeito'" <pfeito () netcabo pt<mailto:pfeito () netcabo pt>>, <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>> Subject: RE: [Snort-users] Slow down TCP connections Date: Sun, 29 Aug 2004 16:22:28 -0400 If you are looking to slow down scans, try a tarpit (e.g. labrea) flexrsp is really designed to reset TCP connections to halt an attack. -----Original Message----- From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net> [mailto:snort-users-admin () lists sourceforge net] On Behalf Of pfeito Sent: Sunday, August 29, 2004 12:57 PM To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net> Subject: [Snort-users] Slow down TCP connections Hi Guys, I'm searching for pro-active plug-ins for Snort.=20 Right know, I've just compiled and installed snort 2.2.0 with flexresp2 support. I'm about to test flexresp2 capabilities, but It seems to have = no support for slowing down TCP connections (i.e. for slowing down TCP = Scans for instance...) Do you know any plug-in that allows Snort to slow down TCP connections = speed (i.e. resize TCP window size) ? Thanks, -pfeito ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=3D5047&alloc_id=3D10808&op=3Dclick<http://ads.osdn.com/?ad_id=3D5047&alloc_id=3D10808&op=3Dclick> _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net> Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users> Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users<http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users> --__--__-- Message: 4 From: "pfeito" <pfeito () netcabo pt<mailto:pfeito () netcabo pt>> To: "'Jim Hendrick'" <jrhendri () maine rr com<mailto:jrhendri () maine rr com>>, <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>> Subject: RE: [Snort-users] Slow down TCP connections Date: Sun, 29 Aug 2004 21:36:32 +0100 That's a cool thing to play around. But right now I'm only studying plugins or modules for Snort. The slow down functionality was only one I example I thought, but it seems not to make sense in a IDS. I'm concentrating right now in developing one or two demos with flexresp. Thanks, -pfeito
-----Original Message----- From: Jim Hendrick [mailto:jrhendri () maine rr com] Sent: domingo, 29 de Agosto de 2004 21:22 To: 'pfeito'; snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net> Subject: RE: [Snort-users] Slow down TCP connections If you are looking to slow down scans, try a tarpit (e.g. labrea) flexrsp is really designed to reset TCP connections to halt an attack. -----Original Message----- From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net> [mailto:snort-users-admin () lists sourceforge net] On Behalf Of pfeito Sent: Sunday, August 29, 2004 12:57 PM To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net> Subject: [Snort-users] Slow down TCP connections Hi Guys, I'm searching for pro-active plug-ins for Snort. Right know, I've just compiled and installed snort 2.2.0 with flexresp2 support. I'm about to test flexresp2 capabilities, but It seems to have no support for slowing down TCP connections (i.e. for slowing down TCP Scans for instance...) Do you know any plug-in that allows Snort to slow down TCP connections speed (i.e. resize TCP window size) ? Thanks, -pfeito ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click> _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net> Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users> Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users>
--__--__-- Message: 5 From: "Patrick S. Harper" <patrick () internetsecurityguru com<mailto:patrick () internetsecurityguru com>> To: "'Miikka Hattberg'" <miikka () miikkah org<mailto:miikka () miikkah org>>, <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>> Subject: RE: [Snort-users] Snort and MySQL Date: Sun, 29 Aug 2004 16:03:54 -0500 Not if you have your conf file set up right. The output database line has that info. Patrick S. Harper | CISSP RHCT MCSE www.internetsecurityguru.com<http://www.internetsecurityguru.com/> www.ntsug.org<http://www.ntsug.org/> - Snort Users Group "If there is no light at the end of the tunnel, get down there and light the damn thing yourself!" -----Original Message----- From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net> [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Miikka Hattberg Sent: Sunday, August 29, 2004 1:49 PM To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net> Subject: Re: [Snort-users] Snort and MySQL I might be totally off, but shouldn't you specify the MySQL username in the command whe you start snort. like ' snort -u snort -c /etc/snort/snort.conf ' m. Robert Spangler wrote:
Hello, I seem to be having a problem setting up snort to use MySQL database. When I run 'snort -c /etc/snort/snort.conf' I get the following: =================================================== Running in IDS mode Log directory = /var/log/snort Initializing Network Interface eth0 --== Initializing Snort ==-- Initializing Output Plugins! Decoding Ethernet on interface eth0 Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file /etc/snort/snort.conf +++++++++++++++++++++++++++++++++++++++++++++++++++ Initializing rule chains... database: compiled support for ( MySQL ) database: configured to use MySQL database: user = snort database: database name = snort database: host = localhost database: sensor name = 192.168.1.100 ERROR: database: MySQL_error: Access denied for user: 'snort@localhost'<mailto:'snort@localhost'> (Using password: NO) Fatal Error, Quitting.. =================================================== snort.conf has the following entry: =================================================== output database: log, MySQL, user=snort, password=******** dbname=snort host=localhost =================================================== MySQL was setup using this line for snort: =================================================== grant INSERT,SELECT on root.* to snort@localhost<mailto:snort@localhost>; SET PASSWORD FOR snort@localhost=PASSOWRD('********'); grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort@localhost<mailto:snort@localhost>; grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort; =================================================== This was a step by step guide I had followed to set this up. I'm hoping someone might be able to see what I'm missing. Thnx
------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click> _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net> Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users> Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users> --__--__-- Message: 6 From: "Patrick S. Harper" <patrick () internetsecurityguru com<mailto:patrick () internetsecurityguru com>> To: "'Michael Steele'" <michaels () winsnort com<mailto:michaels () winsnort com>>, <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>, "'Robert Spangler'" <bms () zoominternet net<mailto:bms () zoominternet net>> Subject: RE: [Snort-users] Snort and MySQL Date: Sun, 29 Aug 2004 16:09:55 -0500 It looks like for some reason he did not give it a password in the conf file. The "using password: NO" is the tip off I believe. As well as the other output, it should look like the following. Notice the "Database: password is set". He does not get that, but the other error at the end about using no password.. What does your output line in your conf file look like? database: compiled support for ( mysql ) database: configured to use mysql database: user = snort database: password is set database: database name = snort database: host = localhost database: sensor name = 208.14.28.12 database: sensor id = 2 database: inconsistent cid information for sid=2 Recovering by rolling forward the cid=35585 Patrick S. Harper | CISSP RHCT MCSE www.internetsecurityguru.com<http://www.internetsecurityguru.com/> www.ntsug.org<http://www.ntsug.org/> - Snort Users Group "If there is no light at the end of the tunnel, get down there and light the damn thing yourself!" -----Original Message----- From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net> [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Michael Steele Sent: Sunday, August 29, 2004 1:52 PM To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net> Subject: RE: [Snort-users] Snort and MySQL Looks like you have no access to the Snort database. Go back and make SURE you can access the database with the credentials that you have in the snort.conf file on the MySQL output database line. Kindest regards, Michael... WINSNORT.com Management Team Member -- Pick up your FREE Windows or UNIX Snort installation guides mailto:support () winsnort com<mailto:support () winsnort com> Website: http://www.winsnort.com<http://www.winsnort.com/> Snort: Open Source Network IDS - http://www.snort.org<http://www.snort.org/>
-----Original Message----- From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net> [mailto:snort-users- admin () lists sourceforge net<mailto:admin () lists sourceforge net>] On Behalf Of Robert Spangler Sent: Sunday, August 29, 2004 10:35 AM To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net> Subject: [Snort-users] Snort and MySQL Hello, I seem to be having a problem setting up snort to use MySQL database. When I run 'snort -c /etc/snort/snort.conf' I get the following: =================================================== Running in IDS mode Log directory = /var/log/snort Initializing Network Interface eth0 --== Initializing Snort ==-- Initializing Output Plugins! Decoding Ethernet on interface eth0 Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file /etc/snort/snort.conf +++++++++++++++++++++++++++++++++++++++++++++++++++ Initializing rule chains... database: compiled support for ( MySQL ) database: configured to use MySQL database: user = snort database: database name = snort database: host = localhost database: sensor name = 192.168.1.100 ERROR: database: MySQL_error: Access denied for user: 'snort@localhost'<mailto:'snort@localhost'> (Using password: NO) Fatal Error, Quitting.. =================================================== snort.conf has the following entry: =================================================== output database: log, MySQL, user=snort, password=******** dbname=snort host=localhost =================================================== MySQL was setup using this line for snort: =================================================== grant INSERT,SELECT on root.* to snort@localhost<mailto:snort@localhost>; SET PASSWORD FOR snort@localhost=PASSOWRD('********'<mailto:snort@localhost=PASSOWRD('********'>); grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort@localhost<mailto:snort@localhost>; grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort; =================================================== This was a step by step guide I had followed to set this up. I'm hoping someone might be able to see what I'm missing. Thnx -- Regards Robert Smile..... It increases your face value. ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click> _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net> Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users> Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users>
------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click> _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net> Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users> Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users> --__--__-- Message: 7 From: Juan Fernandez <Juan.Fernandez () deltathree com<mailto:Juan.Fernandez () deltathree com>> To: "'snort-users () lists sourceforge net'<mailto:'snort-users () lists sourceforge net'>" <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>> Date: Mon, 30 Aug 2004 02:02:19 +0300 Subject: [Snort-users] : setup postfix please help !!!!!!!!!!1 This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C48E1C.3533D7EB Content-Type: text/plain; charset="iso-8859-1" Hi guys, Can someone please send to me his/heres main.cf file so I can take it as an example to config my postfix on mt snort sesnsors? I cant configure it aloe I massed up my main.cf file.. Please help... All I need to configure is that the sensors will pass the mails to my internal exchange server to my mailbox... Please help !!! Thanks !!! ------_=_NextPart_001_01C48E1C.3533D7EB Content-Type: text/html; charset="iso-8859-1" <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML xmlns="http://www.w3.org/TR/REC-html40<http://www.w3.org/TR/REC-html40>" xmlns:o = "urn:schemas-microsoft-com:office:office" xmlns:w = "urn:schemas-microsoft-com:office:word"><HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"> <META content="MSHTML 6.00.2800.1458" name=GENERATOR> <STYLE>@page Section1 {size: 595.3pt 841.9pt; margin: 1.0in 1.25in 1.0in 1.25in; } P.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; DIRECTION: rtl; FONT-FAMILY: "Times New Roman"; unicode-bidi: embed; TEXT-ALIGN: right } LI.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; DIRECTION: rtl; FONT-FAMILY: "Times New Roman"; unicode-bidi: embed; TEXT-ALIGN: right } DIV.MsoNormal { FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; DIRECTION: rtl; FONT-FAMILY: "Times New Roman"; unicode-bidi: embed; TEXT-ALIGN: right } A:link { COLOR: blue; TEXT-DECORATION: underline } SPAN.MsoHyperlink { COLOR: blue; TEXT-DECORATION: underline } A:visited { COLOR: purple; TEXT-DECORATION: underline } SPAN.MsoHyperlinkFollowed { COLOR: purple; TEXT-DECORATION: underline } SPAN.EmailStyle17 { COLOR: windowtext; FONT-FAMILY: Arial; mso-style-type: personal-compose } DIV.Section1 { page: Section1 } </STYLE> </HEAD> <BODY lang=EN-US vLink=purple link=blue> <DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV> <DIV> <DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma size=2></FONT></DIV><FONT face=Arial color=#0000ff size=2></FONT></DIV> <DIV> <DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma size=2></FONT></DIV><FONT face=Arial color=#0000ff size=2></FONT></DIV> <DIV> </DIV> <P dir=ltr> <DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma size=2></FONT></DIV><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Hi guys,<o:p></o:p></SPAN></FONT> <P></P> <BLOCKQUOTE dir=rtl style="MARGIN-LEFT: 0px"> <DIV class=Section1 dir=rtl> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Can someone please send to me his/heres main.cf file so I can take it as an example to config my postfix on mt snort sesnsors?<o:p></o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">I cant configure it aloe I massed up my main.cf file..<o:p></o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Please help...<o:p></o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">All I need to configure is that the sensors will pass the mails to my internal exchange server to my mailbox...<o:p></o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Please help !!!<o:p></o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P> <P class=MsoNormal dir=ltr style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Thanks !!!<o:p></o:p></SPAN></FONT></P></DIV></BLOCKQUOTE></BODY></HTML> ------_=_NextPart_001_01C48E1C.3533D7EB-- --__--__-- Message: 8 From: "Andy" <andy () page55 com<mailto:andy () page55 com>> To: <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>> Date: Sun, 29 Aug 2004 18:22:48 -0500 Subject: [Snort-users] glibc dependency errors installing snort Hi, I'm having problems installing snort, I'm getting glibc dependency errors. I running RedHat 7.3, trying to install snort-2.1.3-1.i386.rpm I can't find a newer version of glibc other than 2.2.5 and really don't know what I'm doing anyway. Am I having these problems because I'm running RH 7.3? Does snort 2.1.3-1 run on RH 7.3? Should I be installing a different package? [root@tunes snort]# rpm -ivh [root@tunes snort]# rpm -ivh snort-2.1.3-1.i386.rpm error: failed dependencies: libc.so.6(GLIBC_2.3) is needed by snort-2.1.3-1 totally new to this, hope you can help. Thanks, Andy --__--__-- _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net> https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users> End of Snort-users Digest
Current thread:
- Snort and MySQL Robert Spangler (Aug 29)
- Re: Snort and MySQL Miikka Hattberg (Aug 29)
- RE: Snort and MySQL Patrick S. Harper (Aug 29)
- RE: Snort and MySQL Michael Steele (Aug 29)
- RE: Snort and MySQL Patrick S. Harper (Aug 29)
- Re: Snort and MySQL [SOLVED MAYBE] Robert Spangler (Aug 29)
- RE: Snort and MySQL [SOLVED MAYBE] Patrick S. Harper (Aug 30)
- <Possible follow-ups>
- Snort and MySQL FAzle Rokib (Aug 29)
- Re: Snort and MySQL Miikka Hattberg (Aug 29)