RE: DB SNORT

["HuMPie" <humpie () grunn org>]

What's the db ?

MySQL: SHOW PROCESSLIST
MS SQL: sp_who2

All above must be done in a query interface.

And if you think you configured it well in your config then you also can
try to run the snort not in deamon mode like this:
snort -I <interface> -c /path/to/config.file -o -N

If it then say it's connecting to a DB server then it's fine and then
you will see your database growing.



 
Best Regards,
 
HuMPie @ Grunn.Org
 
mrtg.grunn.org Dutch mirror of MRTG
www.webdns.info Dutch private DNS hoster
===========================================
Motto:
Writing software is more fun than working.
 
===========================================
Disclaimer:
All you do with the suggestion in this mail is you responsibillity even
if your system will crash :)


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of
Israel_Guadalupe_Lopez_Mascorro../Administracion/Jalisco () jalisco gob mx
Sent: maandag 23 februari 2004 21:55
To: snort-users () lists sourceforge net
Subject: [Snort-users] DB SNORT






Hi
Sorry but I don`t kwon how I check if snort is logging to the db or if
acid has connection to that db

Could help me with that

Thanks


 

             "Fred McFeeters"

             <nfolink@hotmail.

             com>
Para 
             Enviado por:
Israel_Guadalupe_Lopez_Mascorro../A 
             snort-users-admin
dministracion/Jalisco<Israel_Guadal 
             @lists.sourceforg
upe_Lopez_Mascorro../Administracion 
             e.net                     /Jalisco () jalisco gob mx>,

 
<snort-users () lists sourceforge net> 
 
cc 
             23/02/2004 12:12

 
Asunto 
                                       RE: [Snort-users] ACID

 

 

 

 

 

 





Have you checked that snort is logging to the db? And that acid has
connection to that db?

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of
Israel_Guadalupe_Lopez_Mascorro../Administracion/Jalisco () jalisco gob mx
Sent: Monday, February 23, 2004 11:39 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] ACID





Hi I installed snort ,php,acid ,mysql and apache in RH9 The installation
was complete and Ican see the ACID page like in the manual`s example but
the page does not have activity Do I have to do something else? Thanks



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users