Snort mailing list archives

RE: Why snort doesn't log any packet?


From: "Smith, Ryan" <Ryan.Smith () MWAA com>
Date: Wed, 1 Jun 2005 10:26:31 -0400

Hello R. Thamrin,

Check your snort.conf file and make sure that you have the following
line:

output database: log, mysql, user=your_snort_user password=password
dbname=snort host=localhost.  

I am just making a basic assumtion.  It would be helpful if you could
possibly post your snort config, so that we may further assist you.

Ryan Smith

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of R. Thamrin
Sent: Wednesday, June 01, 2005 9:13 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Why snort doesn't log any packet?

Hi snort users,

I installed snort version 2.x on a windows. The snort version I'm using
is bundled with Acid, MySQL, Apache, IDSCenter in an EagleX package. I'm
using default settings from EagleX.

However, when I connected my computer to a network through hub, there
was received and transmitted data but snort doesn't log any packet to
mysql database (Acid doesn't show any data). I tried to wait for several
hours but the database is still empty. It seems snort doesn't record any
traffic.

Is this a know bug?

What should I do to overcome this problem?

Any hints and help would be appreciated.



                
__________________________________
Discover Yahoo! 
Have fun online with music videos, cool games, IM and more. Check it
out! 
http://discover.yahoo.com/online.html


-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit
http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email is sponsored by Yahoo.
Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
Search APIs Find out how you can build Yahoo! directly into your own
Applications - visit http://developer.yahoo.net/?fr=offad-ysdn-ostg-q22005
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: