Snort mailing list archives
Re: How to log on MySql
From: "jon baer" <security () jonbaer net>
Date: Fri, 21 Nov 2003 11:02:54 -0500
Don't use -l or -A flags in your command line if you want to dump to MySQL ... (and make sure any iptables or firewalls allow the traffic) - jon ----- Original Message ----- From: "Damiano Bolzoni" <damiano.bolzoni () tin it> To: <snort-users () lists sourceforge net> Sent: Friday, November 21, 2003 6:00 AM Subject: [Snort-users] How to log on MySql
Hi all, I've installed Snort on Windows XP and EasyPHP in order to log on MySql
and
use Acid. I've modified "snort.conf" in order to log alerts on Mysql: output database: log, mysql, user=snortusr password=snortusr dbname=snort host=127.0.0.1 port=3306 detail=full output database: alert, mysql, user=snortusr password=snortusr
dbname=snort
host=127.0.0.1 port=3306 detail=full then I execute snort with these paramaters: snort -de -c C:\Ids\Snort\etc\snort.conf -l C:\Ids\Snort\log -A full but it only logs in "log" directory...I've verified that user "snortusr"
has
priviliges to access and modify database "snort". What's wrong?!? Thanx! Damiano ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How to log on MySql Damiano Bolzoni (Nov 21)
- Re: How to log on MySql jon baer (Nov 21)
- <Possible follow-ups>
- RE: How to log on MySql Snort (Nov 21)
- RE: How to log on MySql Michael Steele (Nov 22)
- RE: How to log on MySql Michael Steele (Nov 22)