mysql.sock

[Chris Feldmann <cfeldmann () nyc rr com>]

I'm going to get flamed and pointed sneeringly to some FAQ, I fear (probably 
to 8.1, but I can hold my own), because I'm sure I've seen this here or 
somewhere, but here goes:

The error:
(snort is being started from /etc/init.d/snort; the script was copied from the 
install dir's S99snort; mysqld is already running)

database: compiled support for ( mysql )
database: configured to use mysql
database:          user = snort
database: password is set
database: database name = snort
database:          host = localhost
database:   sensor name = XX.XX.XX.XXX
ERROR: database: mysql_error: Can't connect to local MySQL server through 
socket '/var/lib/mysql/mysql.sock' (2)

The consensus on the web is that this is a permissions problem, but I'm sure I 
have my owners and groups for the mysql subdirs correctly assigned to root 
and mysql respectively. I'll post ls -l output for whatever, though; just 
ask. The most obvious source of the problem is that mysql.sock does not exist 
in /var/lib/mysql or anywhere else. Someone suggested ./configure 
--with-unix-socket-path=/path in the mysql build, but that was a non-starter 
(to quote Ari Fleischer). Snort was running fine until I decided I wanted to 
get all fancy with a database and ACID, but those binary logs are so hard to 
parse.

-chris (at least there aren't a bunch of legal disclaimers and html tags 
following)




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users