Snort mailing list archives

Re: Barnyard to Mysql errror


From: Patrick Marquetecken <patrick.marquetecken () pandora be>
Date: Thu, 11 Nov 2004 11:32:58 +0100

On Wed, 10 Nov 2004 11:20:01 -0700
"Schott, Erik J Mr ANOSC/FCBS" <erik.schott-FCBS () NETCOM ARMY MIL> wrote:

Hi Patrick.  I forwarded your message to the barnyard-users list to try to
bring in the cavalry.  Did you check your tcp wrappers and iptables to be
sure your barnyard host can connect to your ACID server? 

Yes, until now there is no security i'm going to try some remote mysql commando's to see if i can connect.

Patrick

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Patrick
Marquetecken
Sent: Wednesday, November 10, 2004 8:28 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Barnyard to Mysql errror


Hi,

I'm having a bit trouble to get Barnyard logging to a external Mysql server.
to a local Mysql all goes well.
the error:
snort # barnyard -o -v ./snort.log.1100108258
Barnyard Version 0.2.0 (Build 32)
Processing: /var/log/snort/./snort.log.1100108258
OpAcidDB configured
  Database Flavour: mysql
  Detail Level: Full
  Database Server: 10.32.3.172
  Database User: snort
Failed to connect to database snort:XXXXXXXX@10.32.3.172/snort: Can't
connect to MySQL server on '10.32.3.172' (
111)
Fatal Error, Quitting..
Exiting

my barnyard config
output log_acid_db: mysql, database snort, server 10.32.3.172, user snort,
password snort, detail full

mysql:
grant CREATE, INSERT, SELECT, DELETE, UPDATE on snort.* to snort;
and user snort = snort@%

what dit i forget ?

TIA
Patrick





-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Attachment: _bin
Description:


Current thread: