[Snort-users] HSC can not connect to snort database!

Jeff Dell jdell at ...1095...
Thu Nov 18 05:34:02 EST 2004


If you would like to ignore the ip address in MySQL, you can add the ip of %
or %.domain.com. For more information, check out:
 
http://dev.mysql.com/doc/mysql/en/Connection_access.html
 
Cheers,
Jeff


  _____  

From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of dogfart big
Sent: Thursday, November 18, 2004 8:13 AM
To: discussion at ...10203...; snort-users at lists.sourceforge.net
Subject: [Snort-users] HSC can not connect to snort database!


Hi I setup all my snort + snortsam + mysql + acid infrastructure on my Linux
box. I find inreresting tool for analyzing snort logs at activex.org.
Honeyput Security Console (HSC) 
 
I set ip tables on my linux and allow mysql 3306 port from my winxp station.

 
I try to connect on snort database but I get an error.
 
I sniff the traffic and see that hsc send "username + @computerdomainname"
instead of username and of course access for this user is denied.Which I can
see from decoded communication.
 
I know that i can create user "username + @computerdomainname" and give a
grant to snort database but is there option to send just "username" that i
put in the first dialogue box? I must recreate user every time I change my
Win XP computer name.
 
Anyone solv this?
 
Regards
Dogfartbig

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20041118/ea8fa9ff/attachment.html>


More information about the Snort-users mailing list