Re: Snort and mysql.sock

[Evan J <maps.this.address () gmail com>]

Dear Luca,

I had the exact same issue two weeks ago when I started using Snort. I
asked around on every forum and mailing list related to MySQL and PHP
and to my amazement no one had an answer to my problem.

Anyway, after a few sleepless nights, one guy pointed out the culprit.
Check out the permission on `/var/run/mysql'.  If you get something
like:

$user> ls -la /var/run/mysql
drwxrwx--- 2 mysql mysql 80 2005-08-24 22:09 ./
....

Then of course the directory is not world readable. `chmod 755
/var/run/mysql' so PHP be able to read it the socket file.

Now, I do not know why you are trying to change the MySQL socket file
path to be located inside your webserver root documet!!!

On 9/8/05, Luca Losio <llosio () crema unimi it> wrote:
> Hi,
> I'm using snort Version 2.1.2 (Build 25) on a OpenBSD 3.7 compiled with
> mysql support.
>
> I modified the /etc/my.cnf file for using a different mysql sock
> (/var/www/var/run/mysql/mysql.sock  instead of var/run/mysql/mysql.sock)
> this why I want php scripts to connect to the mysql server.
> All the php scripts are working, mysql client is working correctly with
> this sock. Not snort. Snort complains it can't find the sock:
>
> FATAL ERROR: database: mysql_error: Can't connect to local MySQL server
> throughsocket '/var/run/mysql/mysql.sock' (2)
>
> I searched thru the snort.conf but I can't find this variable..
> Please tell me the sock path isn't hardcoded into snort...
>
> Bye!
>
> P.s I know I can get snort working with this sock using a link, just
> wondering why snort want this particular sock :)
>
>
> -------------------------------------------------------
> SF.Net email is Sponsored by the Better Software Conference & EXPO
> September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
> Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
> Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users