[Snort-users] Newbie Question -- Problem with snort-mysql install on debian

Jonathan Jesse jjesse at ...9127...
Fri Aug 27 10:38:05 EDT 2004


Newbie again question:  How do I do that, shouldn't that have happened
when I installed it via the package?

Jonathan Jesse
MCSA, Network+
Network Specialist
Founders Trust Personal Bank
www.ftpb.com

This page and any accompanying documents contain confidential
information intended for a specific individual and purpose. If you are
not the intended recipient, you are hereby notified that any disclosure,
copying, distribution, or use of the information contained herein
(including any reliance thereon) is strictly prohibited. If you received
this transmission in error, please immediately contact the sender and
destroy the material in its entirety, whether in electronic or hard copy
format. 


-----Original Message-----
From: sekure [mailto:sekure at ...11827...] 
Sent: Friday, August 27, 2004 12:36 PM
To: Jonathan Jesse
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Newbie Question -- Problem with snort-mysql
install on debian

My guess is that snort tries to connect to mysql before mysql service
is fuly loaded and fails.  Make sure that Snort is started after MySQL
is up and running.

----- Original Message -----
From: Jonathan Jesse <jjesse at ...9127...>
Date: Fri, 27 Aug 2004 12:04:15 -0400
Subject: [Snort-users] Newbie Question -- Problem with snort-mysql
install on debian
To: snort-users at lists.sourceforge.net



I have installed the Sarge install of Debian on my local linux box and
have narrowed down my earlier problem with two NICs.  Now when I start
snort it ends and tells me to check /var/log/daemon.log.  I see snort
starting and ending and this is what shows:

Snort: database: mysql_error: Can't connect to local MySQL server
through socket '/var/run/mysql/mysqld.sock' (111) SQL=UPDAATE senson
SET last_cid = - WHERE sid = 1


This is when I first boot up the machine.  Once the machine is up and
running I can connect to mysql, through mysql -u snort -p and it works
fine.  Any help would be greatly appreciated.

Jonathan Jesse

MCSA, Network+

Network Specialist

Founders Trust Personal Bank

www.ftpb.com

This page and any accompanying documents contain confidential
information intended for a specific individual and purpose. If you are
not the intended recipient, you are hereby notified that any
disclosure, copying, distribution, or use of the information contained
herein (including any reliance thereon) is strictly prohibited. If you
received this transmission in error, please immediately contact the
sender and destroy the material in its entirety, whether in electronic
or hard copy format.




More information about the Snort-users mailing list