Re: Snort not connecting to MySQL

[twig les <twigles () yahoo com>]

TCPdump and error messages are your friends.  Throw up
a tcpdump session on the mysql server box and see if
snort is even launching packets at the server.  Unless
you have an error messsage that already establishes
this fact, in which case you need to send that with
the post to get any help.


--- "Michael J. Ayers" <ayersmj () eidogen com> wrote:
> I have snort installed and working for the most
> part...but the only
> thing that is not working is it is not connecting to
> the mysql database
> to update it.  I have verified that the host running
> snort CAN access
> the database...it just seems that snort isn't.  I
> have quadruple checked
> the following and it is correct:
>
> output database: log, mysql, user=snort
> password=snort dbname=snort
> host=10.0.0.2 port=3306
>
> Can anyone give me a heads up on how to figure out
> what is going on here
> that it is not connecting or how to turn on mysql
> logging?
>
> Thanks.
>
> -- 
> Michael J. Ayers
> IT Manager
> Eidogen Inc.
> ayersmj () eidogen com
> 626.817.2266
>
> This e-mail message is for the sole use of the
> intended recipient(s) and
> may contain confidential information. Any review,
> use, disclosure or
> distribution by persons or entities other than the
> intended recipient(s)
> is prohibited.  If you are not the intended
> recipient or have any
> questions concerning whether or not you  should be
> receiving this
> disclosure, please contact the sender  by reply and
> destroy all copies
> of the original message. Thank you.
-------------------------------------------------------
> This SF.NET email is sponsored by: A Thawte Code
> Signing Certificate 
> is essential in establishing user confidence by
> providing assurance of 
> authenticity and code integrity. Download our Free
> Code Signing guide:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0028en
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or
> unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
Know yourself and know your enemy and you will never fear defeat.         
-----------------------------------------------------------

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com


-------------------------------------------------------
This SF.NET email is sponsored by: A Thawte Code Signing Certificate 
is essential in establishing user confidence by providing assurance of 
authenticity and code integrity. Download our Free Code Signing guide:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0028en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users