Potential MySQL problem? [RMC-N2XAG14]

["Romulo M. Cholewa" <rmc () rmc eti br>]

Hail,

I'm running into a problem. When I restart a specific sensor, I get snort error messages like this:

COMPUTERNAME   xxxxx 
TIME 2/23/2003 1:24:06 PM 
MESSAGE FATAL ERROR: database: mysql_error: Host 'xxxxx.com' is blocked because of many connection errors. Unblock with 
'mysqladmin flush-hosts'

Of course, running the command suggested always solves the problem. Since the snort service is configured to recover 
always, and every minute, it generates lots of logs but does not start the snort service since the error condition is 
still present.

My intention is to automate the recovery process unattended.

My question is: since everytime it happens the sensor is disabled, is there any implications of running the command 
'mysqladmin flush-hosts' scheduled, say, every 5 minutes ?

Thanks in advance,

Romulo M. Cholewa
Home : http://www.rmc.eti.br
Forum: http://zeus.rmc.eti.br/forum
PGP Keys Available @ website.

   "Without facts, the decision cannot be made logically. You   
          must rely on your human intuition." -- Spock          
                                                                 
                                                                 


-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users