[Snort-users] RE: (Snort-users) multiple snorts to 1 mysql database

Madziarczyk, Jonathan than at ...3657...
Tue Oct 2 06:44:02 EDT 2001

Woo Hoo!

I'm rocking and rolling now...
I cleared the user from the database and re-entered it (without my special
characters "~") and I'm good to go now.

Thanks for all your help.


-----Original Message-----
From: sandro.poppi at ...3316... [mailto:sandro.poppi at ...3316...] 
Sent: Tuesday, October 02, 2001 12:38 AM
To: than at ...3657...; snort-users at lists.sourceforge.net
Subject: AW: (Snort-users) multiple snorts to 1 mysql database


I just ran into the same prob. My solution was to delete the user and
it again using the following commands, but be careful if there are more
with the given hostname you have to specify a additional where clause on the
delete statement:

$ mysql -u root mysql
mysql> delete from user where Host='host.domain.com';
mysql> insert into user (Host,User,Password)
mysql> flush privileges;



> -----Ursprüngliche Nachricht-----
> Von: "Madziarczyk Jonathan" <than at ...3657...> at internet
> Gesendet: Montag, 1. Oktober 2001 17:42
> An: snort-users at lists.sourceforge.net at Internet
> Betreff: [Snort-users] multiple snorts to 1 mysql database
> Hi all,
> I'm currently attempting to log a *nix snort box to a Win2k
> box running
> snort/mysql/acid.  I am able to successfully log to mysql
> locally on the
> win2k box thanks to the directions provided by Silicon
> Defense.  I have
> compiled snort on the *nix box --with-mysql=pathtomysql (I
> didn't really
> install mysql completely since I'm not logging to the local
> box, but it went
> through with no errors) and have the following statement in
> my snort.conf:
> output database: log, mysql, user=snort password=NOT dbname=snort
> sensor_name=linux host= port=3306
> I then went into mysql and added the user snort at ...3658... to the
> database with the same permissions that snort at ...274... had(I
> can see it if
> I do a "mysql> select * from user;")  Makes sense to me so far.
> However, when I try to run snort, I get the following:
> .......edited for space.......
> Using LOCAL time
> database: compiled support for ( mysql )
> database: configured to use mysql
> database:          user = snort
> database: password is set
> database: database name = snort
> database:   sensor name = linux
> database:          host =
> database:          port = 3306
> database: mysql_error: Access denied for user: 'snort at ...3658...'
> (Using password: YES)
> Fatal Error, Quitting..
> Does anyone have any ideas?
> Thanks,
> JonM
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

More information about the Snort-users mailing list