Snort mailing list archives
Re: snort 2.8.6.0 inline (remote sensor) won't connect to mysqld
From: Joel Esler <jesler () sourcefire com>
Date: Tue, 11 May 2010 20:50:09 -0400
Possibly. Check your alerts. However, what you should do, especially in inline mode, is from Snort, log to unified. Then use barnyard to read the unified files and input them into the database. On Tuesday, May 11, 2010, Lawrence R. Hughes, Sr. <lhughes () safemedia com> wrote:
Hi, We have snort 2.8.6.0 inline working with a local snort database and reporting works. When we try to have the same sensor now connect to a remote snort mysq database, it won't connect? We have other snort 2.8.6.0 (non-inline) sensors connect to the same mysql server and they work fine. All permissions have been entered into the mysql database to allow that remote inline sensor to connect. When we run snort 2.8.6.0 in the non-inline mode on the same machine, it can connect to the remote database? Is the inline sensor blocking our connection to the database? Thanks, Larry
------------------------------------------------------------------------------ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort 2.8.6.0 inline (remote sensor) won't connect to mysqld Lawrence R. Hughes, Sr. (May 11)
- Re: snort 2.8.6.0 inline (remote sensor) won't connect to mysqld Will Metcalf (May 11)
- Re: snort 2.8.6.0 inline (remote sensor) won't connect to mysqld Joel Esler (May 11)
- Re: snort 2.8.6.0 inline (remote sensor) won't connect to mysqld Paul Schmehl (May 12)