[Snort-users] ACID And MYSQL

Schmehl, Paul L pauls at ...6838...
Mon Jun 9 14:13:07 EDT 2003


I can think of a few things.  The mysql account you are using to query
the database doesn't have sufficient/correct grants to do the queries.
The account password is incorrect.  The queries are being done
incorrectly.  You're not really logging in to the snort database at all.
ColdFusion doesn't have the right "connector" to query mysql directly (I
somehow doubt this) or you might not have that "connector" enabled.
Etc., etc.

At this point you're going to have to do some troubleshooting.  Start by
logging in to mysql as admin and query the snort database directly to
see if there's anything in the database.  A simple select count(*) from
event; should be sufficient.  Then try logging in using the account that
you created for access to the db and see if it returns anything for the
same query.

If the database has data in it and the account is able to login and see
the data, then it has to be something external to mysql, so then you
need to look at ColdFusion and the queries that you've written.  I'm
pretty sure ColdFusion should be capable of natively interacting with
mysql, but I suppose there could be a problem with it.

Is there anything in the logs that might point you in the right
direction?  What OS are you running ColdFusion on?  How does it query
the database?  Remotely?

Paul Schmehl (pauls at ...6838...)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

-----Original Message-----
From: John Ceballos-contr [mailto:John.Ceballos-contr at ...9411...] 
Sent: Monday, June 09, 2003 3:03 PM
To: snort-users at lists.sourceforge.net; Schmehl, Paul L
Subject: RE: [Snort-users] ACID And MYSQL


OK. Thanks Paul!

My webpage is made with ColdFusion and I can't see why I am not getting
the proper info unless I log into the ACID interface. My webpage also
queries the database directly. This webpage doesn't have to do anything
with ACID. Anybody know if there is something I am missing when I made
this page with ColdFusion? Thanks!




More information about the Snort-users mailing list