Snort mailing list archives

RE: snort & mysql; not using the password?!


From: "Miller, Eoin" <Miller () fhlb-of com>
Date: Tue, 8 Oct 2002 11:40:20 -0400

lets see here.... this is your error:
database: mysql_error: Access denied for user: 
'snortman@localhost' (Using
password: NO)


and this is your conf file:
  output database: log, mysql, user=userxxx dbname=xxx host=localhost

i dont see you passing a password here, maybe try this?
output database: log, mysql, user=userxxx dbname=xxx host=localhost password=snort

just a thought  :)

-----Original Message-----
From: Folkert van Heusden [mailto:folkert () vanheusden com]
Sent: Tuesday, October 08, 2002 11:29 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] snort & mysql; not using the password?!


Hi,

I'm trying to get snort 1.8.7 to work with mysql 3.23.39
In snort.conf I added the following line:
  output database: log, mysql, user=userxxx dbname=xxx host=localhost
When I logon into myqsl like this:
mysql -u userxxx -h localhost -p snort
all works fine!
But if I try to start snort like this:
/usr/local/bin/snort -c /usr/local/etc/snort.conf -dvi ppp0
I get the following error:
database: compiled support for ( mysql )
database: configured to use mysql
database: database name = snort
database:          user = userxxx
database:          host = localhost
database: password is set
Node unique name is: 213.84.46.114
database:   sensor name = 213.84.46.114
database:     sensor id = 1
database: schema version = 105
database: using the "log" facility
limit == 128
UnifiedAlertFilename = snort.alert
database: compiled support for ( mysql )
database: configured to use mysql
database:          user = userxxx
database: database name = xxx
database:          host = localhost
Node unique name is: 213.84.46.114
database:   sensor name = 213.84.46.114
database: mysql_error: Access denied for user: 
'snortman@localhost' (Using
password: NO)

This is rather strange! Suddenly it takes the password for the
database-name, and when snort tries to connect to the database
it doesn't use the password!

Anyone got a clue what can be the cause of this?


Folkert van Heusden

------------------------------------------------------------
Folkert van Heusden
Mobile phone: +31-6-41278122
Work e-mail address: f.v.heusden () ftr nl
ICQ number: 105675015
PGP-key available on request
------------------------------------------------------------




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: