[Snort-users] MySQL Help Needed w Snort

___cliff rayman___ cliff at ...1366...
Thu Mar 1 01:03:27 EST 2001


have u tried it w/out the -A full.
i had a similar issue when i added output directives to my
conf file.  not sure if it is in the regular documentation, but
i believe logging on the command line overrides the logging
directives in the rules file.

hth,

--
___cliff rayman___cliff at ...1367...://www.genwax.com/

ryan wrote:

> Hello,
>
> I have got everything else working fine except the mysql connection. My
> conf seems to work fine as well, or at least my rules and alerts are
> being sent to general logging .
>
> The following line is my Output Plugin:::::
>
> output database: log, mysql,  user=snort dbname=snort host=localhost
> password=snotty
>
> isnt't that correct?
>
> or can I alternatively use
>
> output database: log, mysql,  user=snort dbname=snort host=localhost
> password=snotty encoding=ascii detail=full
>
> ?
> Well in my case neither work: I need help.
>
> When I load snort.conf with snort -Afull -c snort.conf I notice this
> line
> WARNING: command line overrides rules file alert plugin!
> Other than that it seems fine, if I run a mysqladmin proceslist -p I
> only confirm my query process but no sessions for snort's user.
>







More information about the Snort-users mailing list