RE: DB ERROR

["Luo, Philip" <Philip_Luo () adp com>]

Sort of half and half like below,

----------------------------------------------------------------------------
----
 Meta  ID # Time Triggered Signature 
1 - 7161 2002-12-19 15:36:49 [snort] (spp_portscan2) Portscan detected from
192.168.24.21: 1 targets 21 ports in 2 seconds 
 
Sensor name interface filter 
ROSE22488273:DevicePacket_IBMTRP1 DevicePacket_IBMTRP1  none  
 
Alert
Group   none  
 
IP  source addr   dest addr   Ver Hdr Len TOS length ID flags offset TTL
chksum 
192.168.24.21 10.1.207.84 4 5 0 1500 1873 0 0 125 16056 
 
Database ERROR:Database ERROR:Access denied for user: 'snort@127.0.0.1' to
database 'snort'


-----Original Message-----
From: Steve Suehring [mailto:snort () braingia org] 
Sent: Thursday, December 19, 2002 3:45 PM
To: Luo, Philip
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] DB ERROR


Is there more of an error message when you do it or is this all that shows
up?

> > > Database ERROR:Database ERROR:Access denied for
> user: 'snort@127.0.0.1' to



On Thu, Dec 19, 2002 at 11:36:37AM -0500, Luo, Philip wrote:
> It still happens to me, especially when I looked at the detail of 
> alerts.
>
> -----Original Message-----
> From: twig les [mailto:twigles () yahoo com]
> Sent: Friday, December 13, 2002 1:05 PM
> To: Steve Suehring; Luo, Philip
> Cc: snort-users () lists sourceforge net
> Subject: Re: [Snort-users] DB ERROR
>
> Actually you may shed some light on it if you try:
>
> mysql -h localhost -u snort -p snort
> mysql -h 127.0.0.1 -u snort -p snort
>
> --- Steve Suehring <snort () braingia org> wrote:
> > Can you try doing something like this from the
> > command-line:
> >
> > mysql -u snort -p snort
> >
> > Then see what error and/or error number you get.
> >
> > Also, from with the MySQL CLI (as root):
> > show grants for snort@localhost;
> > show grants for snort@127.0.0.1;
> >
> > Steve
> >
> > On Fri, Dec 13, 2002 at 09:20:46AM -0500, Luo,
> > Philip wrote:
> > > I did, no luck. I modifies the hosts file too.
> > >
> > > -----Original Message-----
> > > From: Jens Krabbenhoeft
> > [mailto:tschenz-snort-users () noris net]
> > > Sent: Thursday, December 12, 2002 11:36 AM
> > > To: snort-users () lists sourceforge net
> > > Subject: Re: [Snort-users] DB ERROR
> > >
> > > Hi,
> > >
> > > > grant INSERT,SELECT,CREATE,DELETE on snort.* to
> > snort@localhost identified
> > >                                                   
> >      ^^^^^^^^^
> > > > Database ERROR:Database ERROR:Access denied for
> > user: 'snort@127.0.0.1' to
> > >                                                   
> >             ^^^^^^^^^
> > > Try doing a grant for snort@127.0.0.1
> > >
> > > HTH,
> > >   Jens
> -------------------------------------------------------
> > > This sf.net email is sponsored by:
> > > With Great Power, Comes Great Responsibility
> > > Learn to use your power at OSDN's High Performance
> > Computing Channel
> > > http://hpc.devchannel.org/ 
> > > _______________________________________________
> > > Snort-users mailing list Snort-users () lists sourceforge net
> > > Go to this URL to change user options or
> > unsubscribe:
> > >
> https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > >
> -------------------------------------------------------
> > > This sf.net email is sponsored by:
> > > With Great Power, Comes Great Responsibility
> > > Learn to use your power at OSDN's High Performance
> > Computing Channel
> > > http://hpc.devchannel.org/ 
> > > _______________________________________________
> > > Snort-users mailing list Snort-users () lists sourceforge net
> > > Go to this URL to change user options or
> > unsubscribe:
> > >
> https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> -------------------------------------------------------
> > This sf.net email is sponsored by:
> > With Great Power, Comes Great Responsibility
> > Learn to use your power at OSDN's High Performance
> > Computing Channel
> > http://hpc.devchannel.org/
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or
> > unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
> =====
> -----------------------------------------------------------
> If you give a man a fish, he can eat for a day
> If you bludgeon him to death, you can eat the fish yourself
>
> -----------------------------------------------------------
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now. 
> http://mailplus.yahoo.com
>
>
>
> -------------------------------------------------------
> This SF.NET email is sponsored by: Geek Gift Procrastinating? Get the 
> perfect geek gift now!  Before the Holidays pass you by.
> T H I N K G E E K . C O M      http://www.thinkgeek.com/sf/
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe: 
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive: 
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.NET email is sponsored by: Geek Gift Procrastinating?
Get the perfect geek gift now!  Before the Holidays pass you by.
T H I N K G E E K . C O M      http://www.thinkgeek.com/sf/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users