Snort mailing list archives
snort 2.6.1.1 not sending to mysql
From: Bryan Swann <swann () spawar navy mil>
Date: Wed, 29 Nov 2006 16:51:00 -0500
I've been using snort 2.4 and decided to upgrade to 2.6.1.1. Though I included the "--with-mysql" directive when running configure, snort fails to send anything to my database. The output directive in the snort.conf reads like "output database: log, mysql, user=dbsnort dbname=snortdb host=1.1.1.1". When snort is started, it doesn't complain about any problems, starts just fine, and adds alerts to the alert file. However, a tcpdump shows that not a single packet is being sent to the database server. There are no other output directives in my configuration file and the previous snort sensor had almost the same exact configuration. Anyone have a suggestion on what the problem could be? I briefly had barnyard configured and was using the unified output. Barnyard had no issues sending data to the database. I was having issues with Base working correctly, but that is another issue. I mention this to show that the database server is accepting data from the server with no problems. ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort 2.6.1.1 not sending to mysql Bryan Swann (Nov 29)