Snort mailing list archives

RE: MYSQL 4.0 root login attempt


From: "David Naylor" <DNaylor () TEXASTRUSTCU ORG>
Date: Tue, 16 Aug 2005 16:24:36 -0500

It's running on Red Hat Linux (which I'm not real familiar with).  What is this HUPing stuff all about?

-----Original Message-----
From: Paul Schmehl [mailto:pauls () utdallas edu]
Sent: Tuesday, August 16, 2005 1:14 PM
To: David Naylor; snort-users () lists sourceforge net
Subject: Re: [Snort-users] MYSQL 4.0 root login attempt


--On Tuesday, August 16, 2005 10:29:06 -0500 David Naylor 
<DNaylor () TEXASTRUSTCU ORG> wrote:

I get this message every morning with source/destination of my Snort box
and database server respectively.  Why is Snort trying to log back into
the SQL server every morning?

Hard to say without knowing a little more - like what OS are you using.

If it's unix, it *could* be syslogd HUPing the process when the logfile is 
turned over.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/ir/security/


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: