[Snort-users] snort v2.0 logging to mysql database

Semerjian, Ohanes ohanes.semerjian at ...8907...
Mon May 5 06:47:20 EDT 2003


Dear all,

I'm testing snort v2.0 on solaris v8 (sparc). I had snort starting but then
it quite with error below. On the databse side I had granted permission to
the user on the sensor to log alerts to mysql (I had 8 other sensors doing
so running v 1.7). On the mysql I use the following command to grant the
permission


grant insert, select, update, delete to user at ...9092... on snort.* identified
by 'password';

but I get the error message below. If any one could assist I would be
grateful. Thanx a lot


database: mysql_error: Unknown column 'last_cid' in 'field list'
SQL=INSERT INTO sensor (hostname, interface, detail, encoding, last_cid)
VALUES ('x.y.z.w','hme0','1','0', '0')
database: Problem obtaining SENSOR ID (sid) from snort->sensor
ERROR: 
 When this plugin starts, a SELECT query is run to find the sensor id for
the
 currently running sensor. If the sensor id is not found, the plugin will
run
 an INSERT query to insert the proper data and generate a new sensor id.
Then a
 SELECT query is run to get the newly allocated sensor id. If that fails
then
 this error message is generated.

 Some possible causes for this error are:
  * the user does not have proper INSERT or SELECT privileges
  * the sensor table does not exist

 If you are _absolutely_ certain that you have the proper privileges set and
 that your database structure is built properly please let me know if you
 continue to get this error. You can contact me at (roman at ...438...).

Fatal Error, Quitting..


Best Regards

Ohanes Semerjian

PGP kEY 
75DF 2980 5663 2DC1 12CD  E43E 94D6 7A9A 222D 3449

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030505/5d105ee9/attachment.html>


More information about the Snort-users mailing list