AW: [Snort-users] snort & mysql; not using the password?!

Sean Wheeler s.wheeler at ...2876...
Tue Oct 8 10:26:07 EDT 2002


<cough> only INSERT, SELECT priviledges required by snort </cough>


-----Ursprüngliche Nachricht-----
Von: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]Im Auftrag von Slighter,
Tim
Gesendet: Dienstag, 8. Oktober 2002 18:37
An: 'Folkert van Heusden'; snort-users at lists.sourceforge.net
Betreff: RE: [Snort-users] snort & mysql; not using the password?!


did you set the privileges for access to the snort database to the user
"snortman" within mysql ?

connect snort
grant ALL on snort.* to snortman;
grant ALL on snort.* to snortman at ...274...;
connect mysql
flush privileges;
exit



-----Original Message-----
From: Folkert van Heusden [mailto:folkert at ...7104...]
Sent: Tuesday, October 08, 2002 9:29 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] snort & mysql; not using the password?!


Hi,

I'm trying to get snort 1.8.7 to work with mysql 3.23.39
In snort.conf I added the following line:
  output database: log, mysql, user=userxxx dbname=xxx host=localhost
When I logon into myqsl like this:
mysql -u userxxx -h localhost -p snort
all works fine!
But if I try to start snort like this:
/usr/local/bin/snort -c /usr/local/etc/snort.conf -dvi ppp0
I get the following error:
database: compiled support for ( mysql )
database: configured to use mysql
database: database name = snort
database:          user = userxxx
database:          host = localhost
database: password is set
Node unique name is: 213.84.46.114
database:   sensor name = 213.84.46.114
database:     sensor id = 1
database: schema version = 105
database: using the "log" facility
limit == 128
UnifiedAlertFilename = snort.alert
database: compiled support for ( mysql )
database: configured to use mysql
database:          user = userxxx
database: database name = xxx
database:          host = localhost
Node unique name is: 213.84.46.114
database:   sensor name = 213.84.46.114
database: mysql_error: Access denied for user: 'snortman at ...274...' (Using
password: NO)

This is rather strange! Suddenly it takes the password for the
database-name, and when snort tries to connect to the database
it doesn't use the password!

Anyone got a clue what can be the cause of this?


Folkert van Heusden

------------------------------------------------------------
Folkert van Heusden
Mobile phone: +31-6-41278122
Work e-mail address: f.v.heusden at ...7105...
ICQ number: 105675015
PGP-key available on request
------------------------------------------------------------




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list