Snort mailing list archives

(no subject)


From: "S.M.Karthik" <karthik () mspl net>
Date: Tue, 27 Aug 2002 11:41:28 +0530

Hi,

Probably you might not have created the username with password for
logging into Mysql db . Have u created tables?

ALso, as U said Snort runs w/o any problem after logging in.
have u checked up often the status :

#/etc/rc.d/init.d/snortd status

checkup for "subsys lock" error.

In my case, I too used the same snort with the same mysql,webmin,ACID
etc.., My snort runs well as a Daemon, but not through the startup script.
by manual.

But through web browser , webmin, when I start, It throws error & refused to
start.

another thing, I am not getting any "log" , where do i checkup for ?
I am not finding anything in "/var/log/snort/*.log " files.
All are empty/.

How can i test snortd by doing IpSpoofing?

Do u have any idea?
Have u tried to do IPspoofing?

Mail me soon.

With regards,
Karthik

----- Original Message -----
From: "Nathanael Morrison" <nathanael_morrison () cogeco ca>
To: <snort-users () lists sourceforge net>
Sent: Monday, August 19, 2002 7:05 PM
Subject: [Snort-users] Starting Snort at Boot Up


Hi,

I can't seem to get snort to start at boot up.

I'm current using the following:

Linux 2.4.18
MySQL 3.23.39
Snort 1.8.6

I created two startup scripts,  /etc/rc.mysqld and /etc/rc.snortd.
I then run /etc/rc.mysqld first and then /etc/rc.snortd by making a call
from
/etc/rc.local. MySQL starts up fine, but snort does not. When I looked at
the
system logs I found the following error:

snort: FATAL ERROR: database: mysql_error: Can't connect to local MySQL
server
through socket '/var/run/mysql/mysql.sock' (2)

Now this is the part I can't figure out. If I call /etc/rc.snortd after
logging in, snort starts up fine. Everything runs great, snort is logging to
MySQL, and I can analyse the packets with ACID. Maybe I'm missing
something... any ideas?

Nathanael




-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: