[Snort-users] DB ERROR

'Steve Suehring' snort at ...7160...
Thu Dec 19 13:06:03 EST 2002


What does your output database line look like in snort.conf?  (Obviously, please 
XXX out the password value.)

output database: log, mysql, user=root password=test dbname=db host=localhost

What happens if you put localhost on that line instead of 127.0.0.1?

Steve

On Thu, Dec 19, 2002 at 03:51:09PM -0500, Luo, Philip wrote:
> Sort of half and half like below,
> 
> ----------------------------------------------------------------------------
> ----
>  Meta  ID # Time Triggered Signature 
> 1 - 7161 2002-12-19 15:36:49 [snort] (spp_portscan2) Portscan detected from
> 192.168.24.21: 1 targets 21 ports in 2 seconds 
>  
> Sensor name interface filter 
> ROSE22488273:DevicePacket_IBMTRP1 DevicePacket_IBMTRP1  none  
>  
> Alert
> Group   none  
>  
> IP  source addr   dest addr   Ver Hdr Len TOS length ID flags offset TTL
> chksum 
> 192.168.24.21 10.1.207.84 4 5 0 1500 1873 0 0 125 16056 
>  
> Database ERROR:Database ERROR:Access denied for user: 'snort at ...263...' to
> database 'snort'




More information about the Snort-users mailing list