[Snort-users] logging to a remote database with mudpit

Lance Boon lboon at ...11799...
Thu May 13 08:29:04 EDT 2004

I'm confused now, you say you tried this from your remote host and it works, but trying the same from the other host failed??? Have you granted the "other" host privileges on the MySql server?

-----Original Message-----
From: Maetzky, Steffen (Extern) [mailto:Steffen.Maetzky at ...11508...] 
Sent: Thursday, May 13, 2004 9:45 AM
To: Lance Boon
Subject: AW: [Snort-users] logging to a remote database with mudpit

Trying this from my remote host works.
Trying the same from the other host failed 

-----Ursprüngliche Nachricht-----
Von: Lance Boon [mailto:lboon at ...11799...] 
Gesendet: Donnerstag, 13. Mai 2004 16:24
An: Maetzky, Steffen (Extern)
Betreff: RE: [Snort-users] logging to a remote database with mudpit

Have you tried just logging into the mysql server from your remote host?
For example mysql -h192.168.1.1 -usnort -p snort Just substitute the ip I
put in there for your mysql server's ip. 

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Maetzky,
Steffen (Extern)
Sent: Thursday, May 13, 2004 8:54 AM
To: 'Snort-users at lists.sourceforge.net'
Subject: [Snort-users] logging to a remote database with mudpit


I try to put data from a host to a mysql-database on a remote one with
mudpit but I get the following error message:

	Host 'hostname' is not allowed to connect to this MySQL Server
	error initializing ".../mp_acid_out.so": retrying unrecognized
parameter "server"

On the remote-host I have given the grants:

	grant INSERT,SELECT on snort.* to snort identified by 'password';
	flush privileges;

On the local host I use (mudpit.conf):

	spool "/var/log/snort" {
		lock = "mysql"
		output=".../mp_acid_out.so", "server <remote server ip>,
user snort, password <password>, database snort, interface eth1"

I don't know what's going wrong.
Any ideas?

Thanks in advance,


This SF.Net email is sponsored by: SourceForge.net Broadband Sign-up now for
SourceForge Broadband and get the fastest
6.0/768 connection for only $19.95/mo for the first 3 months!
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list