[Snort-users] Snort 2.0 as a Windows Service??

Uhte, Russ RussU at ...6702...
Wed Apr 23 07:37:21 EDT 2003


> Here is the output from that command:
> 
> C:\Snort\snort\bin>snort -c c:\snort\snort\etc\snort.conf -l 
> c:\snort\snort\log -h 10.0.1.0.0/24 -
> Running in IDS mode
> Log directory = c:\snort\snort\log
> 
> Initializing Network Interface 
> \Device\NPF_{2B69D982-02F2-4669-B6F4-A80FB5340CAB}
> 
>         --== Initializing Snort ==--
> Initializing Output Plugins!
> Decoding Ethernet on interface 
> \Device\NPF_{2B69D982-02F2-4669-B6F4-A80FB5340CAB}
> Initializing Preprocessors!
> Initializing Plug-ins!
> Parsing Rules file c:\snort\snort\etc\snort.conf
<..SNIP..>
> database: compiled support for ( mysql odbc )
> database: configured to use mysql
> database:          user = snort
> database: password is set
> database: database name = snort
> database:          host = 127.0.0.1
> database:          port = 3306
> database:   sensor name = Websrv15e
> database:     sensor id = 2
> database: schema version = 106
> database: using the "alert" facility
> database: compiled support for ( mysql odbc )
> database: configured to use mysql
> database:          user = snort
> database: database name = snort
> database:          host = 127.0.0.1
> database:          port = 3306
> database:   sensor name = Websrv15e
> ERROR: database: mysql_error: Access denied for user: 
> 'snort at ...263...' 
> (Using password: NO)
> Fatal Error, Quitting..

In your snort.conf file, do you have the proper username/password setup for
your database?  I think what I would do from here is grab the
winsnortiis.pdf file from SiliconDefense and start at page 8.  Make sure you
change your database output lines in snort.conf as shown on page 6 to
reflect the users that you create in the database.  See where that takes
you, and let me know.  

Also, Michael, if your reading this, I noticed a couple places in that
documentation that had "/" when they should have been "\".  I'd be happy to
point those out to you if you would like.  Awesome document!!  Great work!!

-Russ


---
CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive
and confidential use of the intended recipient. If you are not the intended
recipient, please do not read, distribute or take action in reliance upon
this message. If you have received this in error, please notify us
immediately by return email and promptly delete this message and its
attachments from your computer system.
---




More information about the Snort-users mailing list