Snort mailing list archives

Re: Barnyard to Mysql errror


From: Patrick Marquetecken <patrick.marquetecken () pandora be>
Date: Thu, 11 Nov 2004 12:41:57 +0100

On Wed, 10 Nov 2004 11:20:01 -0700
"Schott, Erik J Mr ANOSC/FCBS" <erik.schott-FCBS () NETCOM ARMY MIL> wrote:

Hi Patrick.  I forwarded your message to the barnyard-users list to try to
bring in the cavalry.  Did you check your tcp wrappers and iptables to be
sure your barnyard host can connect to your ACID server? 

Its a stupid error, i forgot to edit my /etc/mysql/my.cnf so mysql was bind only to 127.0.0.1
All works fine now.

Patrick


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Patrick
Marquetecken
Sent: Wednesday, November 10, 2004 8:28 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Barnyard to Mysql errror


Hi,

I'm having a bit trouble to get Barnyard logging to a external Mysql server.
to a local Mysql all goes well.
the error:
snort # barnyard -o -v ./snort.log.1100108258
Barnyard Version 0.2.0 (Build 32)
Processing: /var/log/snort/./snort.log.1100108258
OpAcidDB configured
  Database Flavour: mysql
  Detail Level: Full
  Database Server: 10.32.3.172
  Database User: snort
Failed to connect to database snort:XXXXXXXX@10.32.3.172/snort: Can't
connect to MySQL server on '10.32.3.172' (
111)
Fatal Error, Quitting..
Exiting

my barnyard config
output log_acid_db: mysql, database snort, server 10.32.3.172, user snort,
password snort, detail full

mysql:
grant CREATE, INSERT, SELECT, DELETE, UPDATE on snort.* to snort;
and user snort = snort@%

what dit i forget ?

TIA
Patrick





-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Attachment: _bin
Description:


Current thread: