[Snort-users] 1.7 and mysql problem

Mark W. Davis mwd at ...497...
Wed Jan 31 00:31:39 EST 2001


That is a good representation of the DB schema. My problem is that
snort does not even attempt to log to the DB. I think it may have
something to do with my having oracle, mysql, and postgres on
the same box. With the default makefile it includes every db it
can find rather than forcing the installer to choose what they
want... this is speculation on my part but I will explore it when
I get more time. For now, I have gone back to 1.6.3 since it has
been working for me with snort and acid.

md

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Roman
Danyliw
Sent: Tuesday, January 30, 2001 7:17 AM
To: mwd at ...497...
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] 1.7 and mysql problem



Check out: acidlab.sourceforge.net/acid_db_er.html
for some preliminary DB documentation

Roman

On Fri, 26 Jan 2001, Mark W. Davis wrote:

> Is this documented somewhere? It would be nice if it were...
>
> -----Original Message-----
> From: snort-users-admin at lists.sourceforge.net
> [mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Martin
> Roesch
> Sent: Friday, January 26, 2001 10:22 PM
> To: Mark W. Davis
> Cc: snort
> Subject: Re: [Snort-users] 1.7 and mysql problem
>
>
> The DB schema changed in version 1.7, you need to recreate the DB using
> the scripts in the contrib directory.
>
>    -Marty
>
> "Mark W. Davis" wrote:
> >
> > Snort configured with mysql enabled but does not log to the database.
> > I've been running 1.6.3 and logging to the db fine. I get no errors
> > nor any connection requests to the db from snort. Anyone else having
this
> > problem? I got 1.7 from the tarball on snort.org
> >
> > Mark W. Davis
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
> 
> --
> Martin Roesch
> roesch at ...421...
> http://www.snort.org





_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users





More information about the Snort-users mailing list