Snort mailing list archives

Re: Problems with snort and B.A.S.E


From: Paul Schmehl <pschmehl_lists () tx rr com>
Date: Tue, 10 Feb 2009 22:05:49 -0600

--On February 10, 2009 8:46:22 PM -0700 Kaustubh Gadkari <kaustubh.gadkari () gmail com> wrote:

+------------------+
| Tables_in_snort  |
+------------------+
| acid_ag          |
| acid_ag_alert    |
| acid_event       |
| acid_ip_cache    |
| base_roles       |
| base_users       |

What does "select count(*) from acid_event" show?


It shows 0.

+----------+
| count(*) |
+----------+
|        0 |
+----------+


So snort is putting events in the db, but base isn't seeing them. Did you edit the base_conf.php file to reflect the proper db type, name and credentials for your setup? Have you enabled sql debugging in the base_conf.php file so you can see what's going on?

Paul Schmehl, If it isn't already
obvious, my opinions are my own
and not those of my employer.
******************************************
WARNING: Check the headers before replying

Attachment: _bin
Description:

------------------------------------------------------------------------------
Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM)
software. With Adobe AIR, Ajax developers can use existing skills and code to
build responsive, highly engaging applications that combine the power of local
resources and data with the reach of the web. Download the Adobe AIR SDK and
Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: