Snort mailing list archives

Previous By Date Next
Previous By Thread Next

Snort and MySQL

From: "FAzle Rokib" <rokib () itsits com>
Date: Sun, 29 Aug 2004 21:16:13 -0400
Try this:

mysql> Grant All On snort.* to  snort@localhost<mailto:snort@localhost>;

or (if you have a password for snort user) 

mysql> Grant All On snort.* to snort@localhost<mailto:snort@localhost> Identified By 'password';

[****If you have a password for snort user, you must use Identified By clause]

Message: 1
From: "Michael Steele" <michaels () winsnort com<mailto:michaels () winsnort com>>
To: <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>
Subject: RE: [Snort-users] Snort and MySQL
Date: Sun, 29 Aug 2004 11:52:02 -0700

Looks like you have no access to the Snort database. Go back and make SURE
you can access the database with the credentials that you have in the
snort.conf file on the MySQL output database line.

Kindest regards, 
Michael...

WINSNORT.com Management Team Member
-- 
Pick up your FREE Windows or UNIX Snort installation guides       
mailto:support () winsnort com<mailto:support () winsnort com>
Website: http://www.winsnort.com<http://www.winsnort.com/>
Snort: Open Source Network IDS - http://www.snort.org<http://www.snort.org/>



-----Original Message-----
From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net> 
[mailto:snort-users-
admin () lists sourceforge net<mailto:admin () lists sourceforge net>] On Behalf Of Robert Spangler
Sent: Sunday, August 29, 2004 10:35 AM
To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>
Subject: [Snort-users] Snort and MySQL

Hello,

I seem to be having a problem setting up snort to use MySQL database.

When I run 'snort -c /etc/snort/snort.conf'  I get the following:

===================================================
Running in IDS mode
Log directory = /var/log/snort

Initializing Network Interface eth0

        --== Initializing Snort ==--
Initializing Output Plugins!
Decoding Ethernet on interface eth0
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /etc/snort/snort.conf

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
database: compiled support for ( MySQL )
database: configured to use MySQL
database:          user = snort
database: database name = snort
database:          host = localhost
database:   sensor name = 192.168.1.100
ERROR: database: MySQL_error: Access denied for user: 'snort@localhost'<mailto:'snort@localhost&apos;>
(Using
password: NO)
Fatal Error, Quitting..
===================================================


snort.conf has the following entry:

===================================================
output database: log, MySQL, user=snort, password=******** dbname=snort
host=localhost
===================================================


MySQL was setup using this line for snort:

===================================================
grant INSERT,SELECT on root.* to snort@localhost<mailto:snort@localhost>;
SET PASSWORD FOR snort@localhost=PASSOWRD('********'<mailto:snort@localhost=PASSOWRD('********'>);
grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort@localhost<mailto:snort@localhost>;
grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort;
===================================================

This was a step by step guide I had followed to set this up.  I'm hoping
someone might be able to see what I'm missing.  Thnx

--

Regards
Robert

Smile.....  It increases your face value.



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click>
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users>
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users>






--__--__--

Message: 2
From: "pfeito" <pfeito () netcabo pt<mailto:pfeito () netcabo pt>>
To: "'Keith W. McCammon'" <mccammon () gmail com<mailto:mccammon () gmail com>>,
<snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>,
<hackerwacker () cybermesa com<mailto:hackerwacker () cybermesa com>>
Subject: RE: [Snort-users] Slow down TCP connections
Date: Sun, 29 Aug 2004 20:13:54 +0100

I don't really have a final purpose, I'm just digging out what proactive
stuff there is out there for Snort. 
I don't need it, I just thought of it, as an example of proactive
functionality and wanted to find out if there is such thing. I guess it is
kind of stupid.... although it could be useful in an snort+honeypot
scenario. Don't really put much though in it.


Why are you seeking and IDS to do traffic queueing ?

No. That would be like trying to cut a steak with a spoon :P !


-----Original Message-----
From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net> 
[mailto:snort-users-
admin () lists sourceforge net<mailto:admin () lists sourceforge net>] On Behalf Of Keith W. McCammon
Sent: domingo, 29 de Agosto de 2004 18:14
To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>
Subject: Re: [Snort-users] Slow down TCP connections


Right know, I've just compiled and installed snort 2.2.0 with flexresp2
support. I'm about to test flexresp2 capabilities, but It seems to have

no

support for slowing down TCP connections (i.e. for slowing down TCP

Scans

for instance...)


Why would Snort want to "slow down" a TCP scan?  Snort will catch it,
and under certain circumstances, flexresp2 can reset those
connections.  That's pretty much the extent of Snort's involvement.


Do you know any plug-in that allows Snort to slow down TCP connections

speed

(i.e. resize TCP window size) ?


No.  What would you accomplish by doing this?  Either block the
traffic or don't.  Slowing it down won't really get you anywhere
(it'll just take the attacker longer to do the same thing).


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click>
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users>
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users>





--__--__--

Message: 3
From: "Jim Hendrick" <jrhendri () maine rr com<mailto:jrhendri () maine rr com>>
To: "'pfeito'" <pfeito () netcabo pt<mailto:pfeito () netcabo pt>>, <snort-users () lists sourceforge 
net<mailto:snort-users () lists sourceforge net>>
Subject: RE: [Snort-users] Slow down TCP connections
Date: Sun, 29 Aug 2004 16:22:28 -0400

If you are looking to slow down scans, try a tarpit (e.g. labrea)
flexrsp is really designed to reset TCP connections to halt an attack.

-----Original Message-----
From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net>
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of pfeito
Sent: Sunday, August 29, 2004 12:57 PM
To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>
Subject: [Snort-users] Slow down TCP connections


Hi Guys,

I'm searching for pro-active plug-ins for Snort.=20

Right know, I've just compiled and installed snort 2.2.0 with flexresp2
support. I'm about to test flexresp2 capabilities, but It seems to have =
no
support for slowing down TCP connections (i.e. for slowing down TCP =
Scans
for instance...)

Do you know any plug-in that allows Snort to slow down TCP connections =
speed
(i.e. resize TCP window size) ?

Thanks,
-pfeito




-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=3D5047&alloc_id=3D10808&op=3Dclick<http://ads.osdn.com/?ad_id=3D5047&alloc_id=3D10808&op=3Dclick>
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users>
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users<http://www.geocrawler.com/redir-sf.php3?list=3Dsnort-users>




--__--__--

Message: 4
From: "pfeito" <pfeito () netcabo pt<mailto:pfeito () netcabo pt>>
To: "'Jim Hendrick'" <jrhendri () maine rr com<mailto:jrhendri () maine rr com>>,
<snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>
Subject: RE: [Snort-users] Slow down TCP connections
Date: Sun, 29 Aug 2004 21:36:32 +0100

That's a cool thing to play around. But right now I'm only studying plugins
or modules for Snort. The slow down functionality was only one I example I
thought, but it seems not to make sense in a IDS. I'm concentrating right
now in developing one or two demos with flexresp.
Thanks,
-pfeito



-----Original Message-----
From: Jim Hendrick [mailto:jrhendri () maine rr com]
Sent: domingo, 29 de Agosto de 2004 21:22
To: 'pfeito'; snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>
Subject: RE: [Snort-users] Slow down TCP connections

If you are looking to slow down scans, try a tarpit (e.g. labrea)
flexrsp is really designed to reset TCP connections to halt an attack.

-----Original Message-----
From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net>
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of pfeito
Sent: Sunday, August 29, 2004 12:57 PM
To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>
Subject: [Snort-users] Slow down TCP connections


Hi Guys,

I'm searching for pro-active plug-ins for Snort.

Right know, I've just compiled and installed snort 2.2.0 with flexresp2
support. I'm about to test flexresp2 capabilities, but It seems to have no
support for slowing down TCP connections (i.e. for slowing down TCP Scans
for instance...)

Do you know any plug-in that allows Snort to slow down TCP connections
speed
(i.e. resize TCP window size) ?

Thanks,
-pfeito




-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click>
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users>
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users>







--__--__--

Message: 5
From: "Patrick S. Harper" <patrick () internetsecurityguru com<mailto:patrick () internetsecurityguru com>>
To: "'Miikka Hattberg'" <miikka () miikkah org<mailto:miikka () miikkah org>>,
   <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>
Subject: RE: [Snort-users] Snort and MySQL
Date: Sun, 29 Aug 2004 16:03:54 -0500

Not if you have your conf file set up right.  The output database line has
that info.  



Patrick S. Harper | CISSP RHCT MCSE
www.internetsecurityguru.com<http://www.internetsecurityguru.com/>

www.ntsug.org<http://www.ntsug.org/> - Snort Users Group

"If there is no light at the end of the tunnel, get down there and light the
damn thing yourself!"
 
-----Original Message-----
From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net>
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Miikka
Hattberg
Sent: Sunday, August 29, 2004 1:49 PM
To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>
Subject: Re: [Snort-users] Snort and MySQL


I might be totally off, but shouldn't you specify the MySQL username in the
command whe you start snort.
like ' snort -u snort -c /etc/snort/snort.conf '

m.

Robert Spangler wrote:


Hello,

I seem to be having a problem setting up snort to use MySQL database.

When I run 'snort -c /etc/snort/snort.conf'  I get the following:

===================================================
Running in IDS mode
Log directory = /var/log/snort

Initializing Network Interface eth0

       --== Initializing Snort ==--
Initializing Output Plugins!
Decoding Ethernet on interface eth0
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /etc/snort/snort.conf

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
database: compiled support for ( MySQL )
database: configured to use MySQL
database:          user = snort
database: database name = snort
database:          host = localhost
database:   sensor name = 192.168.1.100
ERROR: database: MySQL_error: Access denied for user: 'snort@localhost'<mailto:'snort@localhost&apos;> 
(Using
password: NO)
Fatal Error, Quitting..
===================================================


snort.conf has the following entry:

===================================================
output database: log, MySQL, user=snort, password=******** dbname=snort 
host=localhost ===================================================


MySQL was setup using this line for snort:

===================================================
grant INSERT,SELECT on root.* to snort@localhost<mailto:snort@localhost>; SET PASSWORD FOR 
snort@localhost=PASSOWRD('********');
grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort@localhost<mailto:snort@localhost>; 
grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to snort; 
===================================================

This was a step by step guide I had followed to set this up.  I'm 
hoping someone might be able to see what I'm missing.  Thnx

 





-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise
J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click>
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users>
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users>



--__--__--

Message: 6
From: "Patrick S. Harper" <patrick () internetsecurityguru com<mailto:patrick () internetsecurityguru com>>
To: "'Michael Steele'" <michaels () winsnort com<mailto:michaels () winsnort com>>,
   <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>,
   "'Robert Spangler'" <bms () zoominternet net<mailto:bms () zoominternet net>>
Subject: RE: [Snort-users] Snort and MySQL
Date: Sun, 29 Aug 2004 16:09:55 -0500

 
It looks like for some reason he did not give it a password in the conf
file.  The "using password: NO" is the tip off I believe.  As well as the
other output, it should look like the following.  Notice the "Database:
password is set".  He does not get that, but the other error at the end
about using no password..  

What does your output line in your conf file look like?


database: compiled support for ( mysql )
database: configured to use mysql
database:          user = snort
database: password is set
database: database name = snort
database:          host = localhost
database:   sensor name = 208.14.28.12
database:     sensor id = 2
database: inconsistent cid information for sid=2
          Recovering by rolling forward the cid=35585



Patrick S. Harper | CISSP RHCT MCSE
www.internetsecurityguru.com<http://www.internetsecurityguru.com/>

www.ntsug.org<http://www.ntsug.org/> - Snort Users Group

"If there is no light at the end of the tunnel, get down there and light the
damn thing yourself!"
 
-----Original Message-----
From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net>
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Michael Steele
Sent: Sunday, August 29, 2004 1:52 PM
To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>
Subject: RE: [Snort-users] Snort and MySQL

Looks like you have no access to the Snort database. Go back and make SURE
you can access the database with the credentials that you have in the
snort.conf file on the MySQL output database line.

Kindest regards,
Michael...

WINSNORT.com Management Team Member
-- 
Pick up your FREE Windows or UNIX Snort installation guides       
mailto:support () winsnort com<mailto:support () winsnort com>
Website: http://www.winsnort.com<http://www.winsnort.com/>
Snort: Open Source Network IDS - http://www.snort.org<http://www.snort.org/>



-----Original Message-----
From: snort-users-admin () lists sourceforge net<mailto:snort-users-admin () lists sourceforge net> 
[mailto:snort-users- 
admin () lists sourceforge net<mailto:admin () lists sourceforge net>] On Behalf Of Robert Spangler
Sent: Sunday, August 29, 2004 10:35 AM
To: snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>
Subject: [Snort-users] Snort and MySQL

Hello,

I seem to be having a problem setting up snort to use MySQL database.

When I run 'snort -c /etc/snort/snort.conf'  I get the following:

===================================================
Running in IDS mode
Log directory = /var/log/snort

Initializing Network Interface eth0

        --== Initializing Snort ==--
Initializing Output Plugins!
Decoding Ethernet on interface eth0
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /etc/snort/snort.conf

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
database: compiled support for ( MySQL )
database: configured to use MySQL
database:          user = snort
database: database name = snort
database:          host = localhost
database:   sensor name = 192.168.1.100
ERROR: database: MySQL_error: Access denied for user: 'snort@localhost'<mailto:'snort@localhost&apos;>
(Using
password: NO)
Fatal Error, Quitting..
===================================================


snort.conf has the following entry:

===================================================
output database: log, MySQL, user=snort, password=******** 
dbname=snort host=localhost 
===================================================


MySQL was setup using this line for snort:

===================================================
grant INSERT,SELECT on root.* to snort@localhost<mailto:snort@localhost>; SET PASSWORD FOR 
snort@localhost=PASSOWRD('********'<mailto:snort@localhost=PASSOWRD('********'>);
grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* to 
snort@localhost<mailto:snort@localhost>; grant CREATE,INSERT,SELECT,DELETE,UPDATE on snort.* 
to snort; ===================================================

This was a step by step guide I had followed to set this up.  I'm 
hoping someone might be able to see what I'm missing.  Thnx

--

Regards
Robert

Smile.....  It increases your face value.



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java 
Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click>
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users>
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users>






-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise
J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click<http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click>
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users>
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users<http://www.geocrawler.com/redir-sf.php3?list=snort-users>



--__--__--

Message: 7
From: Juan Fernandez <Juan.Fernandez () deltathree com<mailto:Juan.Fernandez () deltathree com>>
To: "'snort-users () lists sourceforge net'<mailto:'snort-users () lists sourceforge net'>"
<snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>
Date: Mon, 30 Aug 2004 02:02:19 +0300
Subject: [Snort-users] :  setup postfix please help !!!!!!!!!!1

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C48E1C.3533D7EB
Content-Type: text/plain;
charset="iso-8859-1"

 
 


Hi guys, 

 

Can someone please send to me his/heres main.cf file so I can take it as an
example to config my postfix on mt snort sesnsors?

 

I cant configure it aloe I massed up my main.cf file..

 

Please help...

 

All I need to configure is that the sensors will pass the mails to my
internal exchange server to my mailbox...

 

Please help !!!

 

Thanks !!!


------_=_NextPart_001_01C48E1C.3533D7EB
Content-Type: text/html;
charset="iso-8859-1"

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40<http://www.w3.org/TR/REC-html40>" xmlns:o = 
"urn:schemas-microsoft-com:office:office" xmlns:w = 
"urn:schemas-microsoft-com:office:word"><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">


<META content="MSHTML 6.00.2800.1458" name=GENERATOR>
<STYLE>@page Section1 {size: 595.3pt 841.9pt; margin: 1.0in 1.25in 1.0in 1.25in; }
P.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; DIRECTION: rtl; FONT-FAMILY: "Times New Roman"; unicode-bidi: embed; TEXT-ALIGN: 
right
}
LI.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; DIRECTION: rtl; FONT-FAMILY: "Times New Roman"; unicode-bidi: embed; TEXT-ALIGN: 
right
}
DIV.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; DIRECTION: rtl; FONT-FAMILY: "Times New Roman"; unicode-bidi: embed; TEXT-ALIGN: 
right
}
A:link {
COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
COLOR: windowtext; FONT-FAMILY: Arial; mso-style-type: personal-compose
}
DIV.Section1 {
page: Section1
}
</STYLE>
</HEAD>
<BODY lang=EN-US vLink=purple link=blue>
<DIV><FONT face=Arial color=#0000ff size=2></FONT>&nbsp;</DIV>
<DIV>
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma 
size=2></FONT></DIV><FONT face=Arial color=#0000ff size=2></FONT></DIV>
<DIV>
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma 
size=2></FONT></DIV><FONT face=Arial color=#0000ff size=2></FONT></DIV>
<DIV>&nbsp;</DIV>
<P dir=ltr>
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma 
size=2></FONT></DIV><FONT face=Arial size=2><SPAN 
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Hi guys,<o:p></o:p></SPAN></FONT> 
<P></P>
<BLOCKQUOTE dir=rtl style="MARGIN-LEFT: 0px">
  <DIV class=Section1 dir=rtl>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Can someone please 
  send to me his/heres main.cf file so I can take it as an example to config my 
  postfix on mt snort sesnsors?<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">I cant configure it 
  aloe I massed up my main.cf file..<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Please 
  help...<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">All I need to 
  configure is that the sensors will pass the mails to my internal exchange 
  server to my mailbox...<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Please help 
  !!!<o:p></o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><o:p>&nbsp;</o:p></SPAN></FONT></P>
  <P class=MsoNormal dir=ltr 
  style="DIRECTION: ltr; unicode-bidi: embed; TEXT-ALIGN: left"><FONT face=Arial 
  size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Thanks 
  !!!<o:p></o:p></SPAN></FONT></P></DIV></BLOCKQUOTE></BODY></HTML>

------_=_NextPart_001_01C48E1C.3533D7EB--


--__--__--

Message: 8
From: "Andy" <andy () page55 com<mailto:andy () page55 com>>
To: <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>
Date: Sun, 29 Aug 2004 18:22:48 -0500
Subject: [Snort-users] glibc dependency errors installing snort

Hi,
I'm having problems installing snort, I'm getting glibc dependency errors.
I running RedHat 7.3, trying to install snort-2.1.3-1.i386.rpm

I can't find a newer version of glibc other than 2.2.5 and really don't know
what I'm doing anyway.

Am I having these problems because I'm running RH 7.3? Does snort 2.1.3-1
run on RH 7.3?

Should I be installing a different package?

[root@tunes snort]# rpm -ivh [root@tunes snort]# rpm -ivh
snort-2.1.3-1.i386.rpm
error: failed dependencies:
        libc.so.6(GLIBC_2.3)   is needed by snort-2.1.3-1

totally new to this, hope you can help.

Thanks,
Andy




--__--__--

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
https://lists.sourceforge.net/lists/listinfo/snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users>


End of Snort-users Digest
Previous By Date Next
Previous By Thread Next

Current thread: