[Snort-users] No output to ACID
jill.tovey at ...8678...
Tue Apr 15 03:35:03 EDT 2003
Yes, I created the DB and tables with the latest create_mysql scripts.
Here is the output I get from the command you gave me:
[root at ...8884... snort]# snort -v -c snort.conf -T -i eth0
Log directory = /var/log/snort
Initializing Network Interface eth0
--== Initializing Snort ==--
Decoding Ethernet on interface eth0
Initializating Output Plugins!
Parsing Rules file snort.conf
Initializing rule chains...
No arguments to frag2 directive, setting defaults to:
Fragment timeout: 60 seconds
Fragment memory cap: 4194304 bytes
Fragment min_ttl: 0
Fragment ttl_limit: 5
Fragment Problems: 0
Stateful inspection: ACTIVE
Session statistics: INACTIVE
Session timeout: 30 seconds
Session memory cap: 8388608 bytes
State alerts: INACTIVE
Evasion alerts: INACTIVE
Scan alerts: ACTIVE
Log Flushed Streams: INACTIVE
TTL Limit: 5
No arguments to stream4_reassemble, setting defaults:
Reassemble client: ACTIVE
Reassemble server: INACTIVE
Reassemble ports: 21 23 25 53 80 143 110 111 513
Reassembly alerts: ACTIVE
Reassembly method: FAVOR_OLD
database: compiled support for ( mysql )
database: configured to use mysql
database: user = *****
database: password is set
database: database name = snort
database: host = 192.168.0.2
Node unique name is: 192.168.0.2
database: sensor name = 192.168.0.2
database: mysql_error: Access denied for user: 'snort at ...8885...'
(Using password: YES)
Fatal Error, Quitting..
I am unsure why I am getting this access denied message for mysql? is
that the problem?
How can I solve this?
On Tue, 2003-04-15 at 10:52, Edin Dizdarevic wrote:
> run Snort with the -T switch first and check for errors.
> I suppose you have a connecting problem - Snort permissions
> set wrong. But Snort would crash then...
> (snort -v -c snort.conf -T -i ethX ...)
> Have you created the requested DB and tables with the
> Jill Tovey wrote:
> > ...
> Edin Dizdarevic
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users