[Snort-users] multiple snorts to 1 mysql database

Jason Lewis jlewis at ...2449...
Mon Oct 1 18:04:01 EDT 2001

Is your DNS setup correctly?  I ended up using snort at ...3662... instead
of the name.

Maybe put the IP and name in /etc/hosts?

Jason Lewis
It's not secure "Because they told me it was secure".
The people at the other end of the link know less
about security than you do. And that's scary.

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of
Madziarczyk, Jonathan
Sent: Monday, October 01, 2001 6:42 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] multiple snorts to 1 mysql database

Hi all,

I'm currently attempting to log a *nix snort box to a Win2k box running
snort/mysql/acid.  I am able to successfully log to mysql locally on the
win2k box thanks to the directions provided by Silicon Defense.  I have
compiled snort on the *nix box --with-mysql=pathtomysql (I didn't really
install mysql completely since I'm not logging to the local box, but it went
through with no errors) and have the following statement in my snort.conf:
output database: log, mysql, user=snort password=NOT dbname=snort
sensor_name=linux host= port=3306

I then went into mysql and added the user snort at ...3658... to the
database with the same permissions that snort at ...274... had(I can see it if
I do a "mysql> select * from user;")  Makes sense to me so far.

However, when I try to run snort, I get the following:
.......edited for space.......
Using LOCAL time
database: compiled support for ( mysql )
database: configured to use mysql
database:          user = snort
database: password is set
database: database name = snort
database:   sensor name = linux
database:          host =
database:          port = 3306
database: mysql_error: Access denied for user: 'snort at ...3658...'
(Using password: YES)
Fatal Error, Quitting..

Does anyone have any ideas?


Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list