Snort mailing list archives

RE: snort installation error


From: "Snort" <Snort () intercept net>
Date: Tue, 4 Nov 2003 09:06:16 -0500

Make sure you added your user to your mysql db as snort@sensor1, to see
a list of users run mysql
Use mysql;
Select * from user;
 
You should see a list of users with the new user you added
 
Michael
 
-----Original Message-----
From: edmund.li () alcatel com hk [mailto:edmund.li () alcatel com hk] 
Posted At: Tuesday, November 04, 2003 2:12 AM
Posted To: Snort
Conversation: [Snort-users] snort installation error
Subject: [Snort-users] snort installation error
 

Dear all, 

Try to connect the sensor by using snortcenter and it has the following
error 
 
 
 
Ports to decode telnet on: 21 23 25 119 
ERROR: database: mysql_error: Access denied for user: 'snort@sensor1'
(Using password: YES)
Fatal Error, Quitting..
database: compiled support for ( mysql )
database: configured to use mysql
database: user = snort
database: password is set
database: database name = snort
database: host = snort1
database: sensor name = sensor1
database: detail level = full
 
 



mysql> show grants for snort@sensor1; 
+-----------------------------------------------------------------------
-------- 
-+ 
| Grants for snort@sensor1 
 | 
+-----------------------------------------------------------------------
-------- 
-+ 
| GRANT USAGE ON *.* TO 'snort'@'sensor1' 
 | 
| GRANT SELECT, INSERT, UPDATE, DELETE, CREATE ON `snort`.* TO
'snort'@'sensor1' 
 | 
+-----------------------------------------------------------------------
-------- 
-+ 
2 rows in set (0.00 sec) 

mysql> 

Any idea ? 

PS plug-in configure 
 
 
 
 
   
 
 
Database: Log to a variety of databases 
Sensor Name 
[AUTO]use keyword [AUTO] for automatic sensor_name 
DB Name 
snort 
DB Type 
mysql[mysql | postgresql | odbc | mssql | oracle] 
DB Host 
snort1(hostname or IP address) 
DB Port 
(default: 3306) 
User 
snort 
Password 
 
Ruletype 
alert[log | alert] 
Encoding 
[hex | base64 | ascii] 
Detail 
full[full | fast] 
ignore bpf 
 
 
 



Edmund 
Thanks 

Current thread: