[Snort-users] Forcing mudpit to use a special port for stunne l

McGuire, Dennis dmcguire at ...8127...
Tue May 25 04:18:02 EDT 2004

Never tried mudpit with stunnel; I rely on ssh port forwarding (i.e. posted
below) & mudpit enjoys itself.  Maybe that'll get you where you want.

# Source function library.
. /etc/rc.d/init.d/functions

[ -f /etc/mudpit.conf ] || exit 1

# See how we were called.
case "$1" in
        echo -n "Starting mudpit: "
        ssh -2 -N -f -L 3306:xxx.xxx.xxx.xxx:3306 user at ...3662...
        echo -n "Stopping mudpit: "
        killproc mudpit
        kill -9 `pidof ssh`
        $0 stop
        $0 start
        status mudpit
        echo "Usage: $0 {start|stop|restart|status}"
        exit 1

exit 0

-----Original Message-----
From: Maetzky, Steffen (Extern) [mailto:Steffen.Maetzky at ...11508...] 
Sent: Tuesday, May 25, 2004 3:31 AM
To: 'snort-users at lists.sourceforge.net'
Subject: [Snort-users] Forcing mudpit to use a special port for stunnel

Hi all,

I try to set up mudpit with stunnel but I ran into a problem which I can't

I'd like to use the following scheme: 	(sensor)
3306--3307---(stunnel)---3307--3306 (database) 

The problem seems to be that mudpit use a random(?) port instead of 3306
which is expected by stunnel. 

I have tried to add port 3306 to the output line of mudpit but without
I can't find the right option and mudpit failes to start. 

Anyone out there who use mudpit with stunnel and can help me?

Does Redhat 9 have a general possibility to force an application to use a
special port?

Thanks in advance,


This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20040525/d140297c/attachment.html>

More information about the Snort-users mailing list