Snort mailing list archives

Re: No output to ACID


From: Jill Tovey <jill.tovey () bigbluedoor com>
Date: 15 Apr 2003 17:00:53 +0100

I am on mandrake an so installed the snort--mysql rpm package that was
on the mandrake CD.
I also installed apache, php and webmin,  from the rpms on the disk.
I installed acid, gd, phplot, adodb, by downloading and unpacking the
tar files.

I followed Steven J. Scotts Snort Installation Manual "Snort, MYSQL and
ACID on Redhat 7.3" Version 1.5.

 

On Tue, 2003-04-15 at 17:51, Rolf Brusletto wrote:
*This message was transferred with a trial version of CommuniGate(tm) Pro*
Jill - Is it a vanilla install? How did you install snort.. tar files? rpms?

Rolf Brusletto
rolf () phpExamples net
PHP/MySQL Coder
Security Admin
http://www.phpExamples.net

----- Original Message -----
From: "Jill">
To: "snort" <snort-users () lists sourceforge net>
Sent: Tuesday, April 15, 2003 1:48 AM
Subject: [Snort-users] No output to ACID


*This message was transferred with a trial version of CommuniGate(tm) Pro*
*This message was transferred with a trial version of CommuniGate(tm) Pro*

Hi everyone,

I have installed snort 1.8.7 with apache, mysql, and acid (on mandrake
9.0).

Everything seems to be working fine, except it's not outputting to acid.
(i.e acid shows, 0 sensors, 0 alerts, etc)

I have gone through the archives and this problem has happened before,
but nothing seems to have been resolved so far.

The output line in my snort.conf file shows this:

output database: alert, mysql, user=***** password=***** dbname=snort
host=192.168.0.2

The thing I find funny is that having this line, makes the next line
show up in white and coloured writing, (as oppose to blue), even though
it is commented out, I wondered if that had anything to do with
anything?!

I have no errors in mysql error log

Does anyone have any suggestions ?



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: