Snort mailing list archives

Using snort-2.9.8.3.How to connect mariadb with a path like the following ?


From: "??????" <292701807 () qq com>
Date: Sat, 22 Oct 2016 19:17:07 +0800

Dear everyone,
  I can't using the snort-2.9.8.3 with a mariadb.So comming for help!Looking for an answer...


old version:
mysql -u root -p </snort/snort-2.8.4.1/schemas/create mysql snort


new version:
[root@localhost snort-2.9.8.3]# ls
aclocal.m4    config.status  etc          Makefile.in    src
cflags.out    config.sub     install-sh   missing        stamp-h1
ChangeLog     configure      libtool      preproc_rules  templates
compile       configure.in   LICENSE      RELEASE.NOTES  tools
config.guess  COPYING        ltmain.sh    rpm            verstuff.pl
config.h      cppflags.out   m4           snort.8        ylwrap
config.h.in   depcomp        Makefile     snort.pc
config.log    doc            Makefile.am  snort.pc.in


  I have a personal installing text.Can any one help me???
  


1.


yum -y install yum-priorities


yum -y install epel-release






2.


yum -y install mariadb mariadb-server mariadb-devel mariadb-bench glib2-devel php-gd gd httpd php php-mbstring 
php-devel php-mysql php-pear gcc gcc-c++ flex bison zlib zlib-devel libpcap pcre pcre-devel libdnet libdnet-devel 
tcpdump






3.su root


cd /etc


cd ..


mkdir snort


cd snort


cp /home/eugene/Desktop/daq-2.0.6.tar.gz /snort


tar -zxvf daq-2.0.6.tar.gz


cd daq-2.0.6


./configure --prefix=/usr/local/snort --bindir=/usr/local/bin --with-libpcap-includes=/usr/local/snort/include 
--with-libpcap-libraries=/usr/local/snort/lib -enable-static


make


make install






mkdir /etc/snort


mkdir /etc/snort/rules


mkdir /var/log/snort


mkdir /etc/snort/so_rules


mkdir /etc/snort/preproc_rules










4.


cp /home/eugene/Desktop/snort-2.9.8.3.tar.gz /snort


tar -zxvf snort-2.9.8.3.tar.gz


cd snort-2.9.8.3


./configure


make


make install


cd etc


cp * /etc/snort






5.


cp /home/eugene/Desktop/snortrules-snapshot-2983.tar.gz /snort


cd /snort


tar -zxvf snortrules-snapshot-2983.tar.gz


cd rules


cp * /etc/snort/rules


cd ..


cd so_rules


cp * /etc/snort/so_rules


cd ..


cd preproc_rules


cp * /etc/snort/preproc_rules






vim /etc/snort/rules/black_list.rules


# black_list


alert icmp 192.168.246.254/32 any -> 192.168.246.0/24 any (msg:"ICMP packets ";sid:999; rev:666;)










vim /etc/snort/rules/white_list.rules


#white_list


alert icmp any any -> any any (msg:"ICMP packets permited!"; sid:900; rev: 600;)






vim /etc/snort/snort.conf






:113 /etc/snort/rules


snort -c /etc/snort/snort.conf






6.


groupadd snort


useradd -g snort snort -s /sbin/nologin


chown -R snort:snort *


chown -R snort:snort /var/log/snort/


cd /snort


chown -R snort:snort daq-2.0.6


chown -R 700 daq-2.0.6


chown -R snort:snort snort-2.9.8.3


chown -R 700 snort-2.9.8.3


cd /usr/local/src


chown -R snort:snort snort_dynamicsrc


chown -R 700 snort_dynamicsr






7.


ln -s /usr/local/bin/snort /usr/sbin/snort


cp /snort/snort-2.9.8.3/rpm/snortd /etc/init.d


cp /snort/snort-2.9.8.3/rpm/snort.sysconfig /etc/sysconfig/snort


chmod 755 /etc/init.d/snortd


chkconfig snortd on


service snortd start










8.


service mysqld start-> systemctl start mariadb


mysql-uroot -p


password:eugene


use mysql;


CREATE USER 'snort'@'localhost' IDENTIFIED BY '123456';


create database snort;






flush privileges;


exit
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: