Snort mailing list archives
RE: Snort and MySQL [SOLVED MAYBE]
From: "Patrick S. Harper" <patrick () internetsecurityguru com>
Date: Mon, 30 Aug 2004 05:42:54 -0500
Have you done a ps -ef |grep snort to make sure snort is running? Also are you using FC2? If so they were having some problems with Aanval on FC2. I working on updating that paper for FC2 and the latest packages and adding oinkmaster, I am doing a test load this evening so I will find out if 1.50 still has a problem. Try setting up acid real fast to see if anything sows up. Patrick S. Harper | CISSP RHCT MCSE www.internetsecurityguru.com www.ntsug.org - Snort Users Group "If there is no light at the end of the tunnel, get down there and light the damn thing yourself!" -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Robert Spangler Sent: Sunday, August 29, 2004 7:02 PM To: snort-users () lists sourceforge net Subject: Re: [Snort-users] Snort and MySQL [SOLVED MAYBE] On Sun August 29 2004 13:35, Robert Spangler wrote:
I seem to be having a problem setting up snort to use MySQL database.
I had an error in my snort.conf file
snort.conf has the following entry: =================================================== output database: log, MySQL, user=snort, password=******** dbname=snort host=localhost ===================================================
The above was placed in the wrong area of the config. When this was corrected snort seemed to run without any problems. NOW I don't think things are running correctly. I run a scan against my machine using CIS and it does it's reporting but I never see anything in ACID or OpenAanval. I used the following quick setup guide written by Patrick Harper at http://www.internetsecurityguru.com/ -- Regards Robert Smile..... It increases your face value. ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort and MySQL Robert Spangler (Aug 29)
- Re: Snort and MySQL Miikka Hattberg (Aug 29)
- RE: Snort and MySQL Patrick S. Harper (Aug 29)
- RE: Snort and MySQL Michael Steele (Aug 29)
- RE: Snort and MySQL Patrick S. Harper (Aug 29)
- Re: Snort and MySQL [SOLVED MAYBE] Robert Spangler (Aug 29)
- RE: Snort and MySQL [SOLVED MAYBE] Patrick S. Harper (Aug 30)
- <Possible follow-ups>
- Snort and MySQL FAzle Rokib (Aug 29)
- Re: Snort and MySQL Miikka Hattberg (Aug 29)