RE: HSC can not connect to snort database!

["Jeff Dell" <jdell () activeworx com>]

If you would like to ignore the ip address in MySQL, you can add the ip of %
or %.domain.com. For more information, check out:
 
http://dev.mysql.com/doc/mysql/en/Connection_access.html
 
Cheers,
Jeff


  _____  

From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of dogfart big
Sent: Thursday, November 18, 2004 8:13 AM
To: discussion () snortsam net; snort-users () lists sourceforge net
Subject: [Snort-users] HSC can not connect to snort database!


Hi I setup all my snort + snortsam + mysql + acid infrastructure on my Linux
box. I find inreresting tool for analyzing snort logs at activex.org.
Honeyput Security Console (HSC) 
 
I set ip tables on my linux and allow mysql 3306 port from my winxp station.

 
I try to connect on snort database but I get an error.
 
I sniff the traffic and see that hsc send "username + @computerdomainname"
instead of username and of course access for this user is denied.Which I can
see from decoded communication.
 
I know that i can create user "username + @computerdomainname" and give a
grant to snort database but is there option to send just "username" that i
put in the first dialogue box? I must recreate user every time I change my
Win XP computer name.
 
Anyone solv this?
 
Regards
Dogfartbig

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com