Re: Snort is not able to forward report to Base.

[Stephen Fernandis [IT Shared Services – Hub] <fernans () mtn co ug>]

Hi Ayodele,

Thanks for your assist,


1)   is logging to MySQL via barnyard2
Ans Yes I logged the mysql via barnyard2, but as per below url of windows snort installation I ignore this step during 
as mention in screenshot. Because I didn’t get the activators and 'sid-msg.map' file on snort site and google. Please 
let me know due to that reason I facing the issue of forward generated logs to Base.

http://winsnort.com/index.php?module=Pages&func=display&pageid=40

[cid:image002.png@01CF08AA.297F12D0]



2)   Check your MySQL database and make sure BASE already has its tables added to the existing Snort Database.
Ans yes I had created.


3)   Why using Windows 7 and not a Linux OS?
Ans I am not comfortable  with linux OS.

Kind Regards,
Stephen Fernandis
Network & Security Domain, Information Technology |MTN-HUB
Cell + 256 785373903 Desk +256 312125995 |email : fernans () mtn co ug<mailto:fernans () mtn co ug>
[cid:image001.png@01CF08A8.8F4E1220]

I do not know anyone who has got to the top without hard work. That is the recipe. It will not always get you to the 
top, but should get you pretty near- In memory of Margaret Thatcher

From: Ayodele Okeowo [mailto:aymacro () gmail com]
Sent: Friday, January 03, 2014 5:14 PM
To: Stephen Fernandis [IT Shared Services – Hub]
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort is not able to forward report to Base.

The first question is have you been able to confirm snort is logging to MySQL via barnyard2? Check your MySQL database 
and make sure BASE already has its tables added to the existing Snort Database. Why using Windows 7 and not a Linux OS? 
Or you could use VirtualBox or VMWare to build a Snort virtual machine within Windows 7 so you would be able to avoid 
any issues Windows might pose?



Ayo

On Fri, Jan 3, 2014 at 4:15 AM, Stephen Fernandis [IT Shared Services – Hub] <fernans () mtn co ug<mailto:fernans () 
mtn co ug>> wrote:
Hi All,

I have installed snort on windows7 desktop for testing. I installed Snort and Base configuration properly, but still 
snort is not able to forward generate logs to Base.

Please help me for integration between snort and base.

Kind Regards,
Stephen Fernandis
Lead Network & Security Domain, Information Technology |MTN-HUB
Cell + 256 785373903<tel:%2B%20256%20785373903> Desk +256 312125995<tel:%2B256%20312125995> |email : fernans () mtn co 
ug<mailto:fernans () mtn co ug>
[cid:image001.png@01CF08A8.8F4E1220]

I do not know anyone who has got to the top without hard work. That is the recipe. It will not always get you to the 
top, but should get you pretty near- In memory of Margaret Thatcher


________________________________
NOTE: This e-mail message is subject to the MTN Group disclaimer see http://www.mtn.co.ug/email/Email-disclaimer.aspx

------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


________________________________
NOTE: This e-mail message is subject to the MTN Group disclaimer see http://www.mtn.co.ug/email/Email-disclaimer.aspx

------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!