RE: snort & sql

["McPheeters, Scott" <smcpheeters () fnms-indy com>]

You might need to start the database.

does this work?  mysql -u root -p
Then enter your password.



if that doesn't work do "service mysqld start" and then make sure you have it auto start (use "ntsysv" and select 
mysqld to have it autostart)

Just a couple of guesses

I don't remember having to set a port, my config for the port is this: $alert_port = "";

Scott


-----Original Message-----
From: Jeremy Rodriguez [mailto:jeremyrodriguez () cmsmechanical com]
Sent: Wednesday, March 05, 2003 9:44 AM
To: McPheeters, Scott
Subject: RE: [Snort-users] snort & sql


Maybe I was not clear in my mail, I receive the following error when trying
to login:

*********************
Warning: Can't connect to local MySQL server through socket
'/var/lib/mysql/mysql.sock' (2) in
/var/www/html/adodb/drivers/adodb-mysql.inc.php on line 225


Error (p)connecting to DB : snort@localhost

Check the DB connection variables in acid_conf.php 

               = $alert_dbname   : MySQL database name where the alerts are
stored 
               = $alert_host     : host where the database is stored
               = $alert_port     : port where the database is stored
               = $alert_user     : username into the database
               = $alert_password : password for the username
              
Database ERROR:Can't connect to local MySQL server through socket
'/var/lib/mysql/mysql.sock' (2)
************************************

It does not say if what port to setup the db on. What port number do I need
to connect on? Is this even the reason?

-----Original Message-----
From: McPheeters, Scott [mailto:smcpheeters () fnms-indy com]
Sent: Wednesday, March 05, 2003 9:29 AM
To: jeremyrodriguez () cmsmechanical com; Snort-users () lists sourceforge net
Subject: RE: [Snort-users] snort & sql


You need to complete the instructions and setup the users to access the
database (version 2 of the instructions pg 11-12, v1.5 pg18-19)

Scott

-----Original Message-----
From: Jeremy Rodriguez [mailto:jeremyrodriguez () cmsmechanical com]
Sent: Tuesday, March 04, 2003 1:18 PM
To: Snort-users () lists sourceforge net
Subject: [Snort-users] snort & sql


I have read Steven Scott "Snort, MySQL and ACID on RedHat 7.3" and know I am
attepmting the setup.
There are no instructions on how to setup the database. I get the following
error:

database: compiled support for ( mysql )
database: configured to use mysql
database:          user = snort
database: password is set
database: database name = snort
database:          host = 172.16.1.2
Node unique name is: 172.16.1.2
database:   sensor name = 172.16.1.2
database: mysql_error: Host '172.16.1.2' is not allowed to connect to this
MySQL server
Fatal Error, Quitting..

I have not setup any users in the database. I am just following the
directions.
The above error happens when I run snort by :

snort -dev -l /var/log/snort -i eth0 -c /etc/snort/snort.conf

How do I get past this error?



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger
for complex code. Debugging C/C++ programs can leave you feeling lost and
disoriented. TotalView can help you find your way. Available on major UNIX
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users