RE: Snort and MySQL [SOLVED MAYBE]

["Patrick S. Harper" <patrick () internetsecurityguru com>]

Have you done a ps -ef |grep snort to make sure snort is running?

Also are you using FC2?  If so they were having some problems with Aanval on
FC2.  I working on updating that paper for FC2 and the latest packages and
adding oinkmaster, I am doing a test load this evening so I will find out if
1.50 still has a problem.  Try setting up acid real fast to see if anything
sows up. 

Patrick S. Harper | CISSP RHCT MCSE
www.internetsecurityguru.com

www.ntsug.org - Snort Users Group

"If there is no light at the end of the tunnel, get down there and light the
damn thing yourself!"
 
-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Robert
Spangler
Sent: Sunday, August 29, 2004 7:02 PM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort and MySQL [SOLVED MAYBE]

On Sun August 29 2004 13:35, Robert Spangler wrote:

>  I seem to be having a problem setting up snort to use MySQL database.

I had an error in my snort.conf file

>  snort.conf has the following entry:
>
>  ===================================================
>  output database: log, MySQL, user=snort, password=******** 
> dbname=snort  host=localhost  
> ===================================================

The above was placed in the wrong area of the config.  When this was
corrected snort seemed to run without any problems.


NOW


I don't think things are running correctly.  I run a scan against my machine

using CIS and it does it's reporting but I never see anything in ACID or 
OpenAanval.

I used the following quick setup guide written by Patrick Harper at 
http://www.internetsecurityguru.com/


-- 

Regards
Robert

Smile.....  It increases your face value.



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users