RE: Snort Logging on Linux but NOT to MYSQL on windows

["Vicky Mair" <vickyr () socal rr com>]

it appears that you are missing semicolon in the command (show database;)
which performs as a line terminator.



hth
/vicky


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of mike Hughes
Sent: Tuesday, February 11, 2003 10:21 PM
To: snort-users () lists sourceforge net; erek () snort org;
CLuther () Xybernaut com
Subject: [Snort-users] Snort Logging on Linux but NOT to MYSQL on
windows


Hi..

Ok i have snort working and logging on my LINUX machine192.168.0.1. They are
alerts in /var/log/snort/alerts and portscan. I have it setup soo it is
suppose to log to my windows machine192.168.0.69 running mysql. I have been
using this as my reference:

http://www.sans.org/rr/intrusion/practical_guide.php

Im on the last step but the MYSQL on my windows machine is not logging
anything.

I know that my Linux machine is connected to MYSQL on the windows machine
becasue im using KERIO firewall and it shows the MYSQL connected to
192.168.0.1 and transferring data but i cant see anything in the events.  I
dont have a CLUE why or how to DEBUG this. Can someone help. If you need my
/etc/snort.conf file it is posted here:

http://sourceforge.net/mailarchive/forum.php?thread_id=1638741&forum_id=3972

Any help on how to debug this problem and get mysql to start logging.



_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE*
http://join.msn.com/?page=features/junkmail



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users