Snort mailing list archives

Re: snorby, squert, BASE and sguil stopped except Snort


From: "Jefferson, Shawn" <Shawn.Jefferson () bcferries com>
Date: Wed, 29 Aug 2012 11:29:30 -0600

Check that you are getting alerts into your database (ie check the tables...do a SELECT *).  Then check your 
configuration of your reporting tools to make sure your database connection is configured properly.

From: daisung choi [mailto:choi.daisung () gmail com]
Sent: Wednesday, August 29, 2012 7:27 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] snorby, squert, BASE and sguil stopped except Snort

Hi all,

Snort and barnyard2 are running and it creates data properly. But when I access to Snorby, Squert, BASE or Sguil, none 
of them display any alerts.

I am using Security Onion and /nsm/sensor_data/computer-desktop-eth1#/ contains today's alert messages so I am sure 
that the Snort is not a problem.

what should I check?

Thanks in advance,

Dai
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: