RE: Not loggin to MySQL Database

["Harper, Patrick" <patrick.harper () phns com>]

What are you running snort on?  

What permissions did you give to the user you listed in the snort.conf
file to log to the database?  Is snort even started (on *nix ps -ef|grep
snort)?  Is mysql running?

Type snort -c /etc/snort/snort.conf (or what ever the path to your
snort.conf is)  this will give you a little more to go on.

Since it has stopped logging to /var/log/snort dir I am betting you have
something wrong with the output line.  Check it out with the command
above (snort -c /etc/snort/snort.conf) and see if it tells you that.


-----Original Message-----
From: Vernon Webb [mailto:vernon () comp-wiz com] 
Sent: Friday, May 28, 2004 5:37 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Not loggin to MySQL Database

I hate doing this as I know how much everyone hates newbie question, but
I am new to SNORT and cannot get SNORT to log to the MySQL database on
my box. 
As far as I can tell all I need do is add the correct user name and
password to the database line in the SNORT.conf file. However when I add
this line it doesn't log to the database and it stops loggin the log
files it logged to prior. Is there something else I am missing here? Any
ideas on debugging this?

Thanks.


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g Get certified on the
hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users






Disclaimer:
This electronic message, including any attachments, is confidential and intended solely for use of the intended 
recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by 
applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have 
received this message in error, please delete it and notify the sender immediately. 





-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users