[Snort-users] MYSQL 4.0 root login attempt

Paul Schmehl pauls at ...6838...
Tue Aug 16 11:14:23 EDT 2005


--On Tuesday, August 16, 2005 10:29:06 -0500 David Naylor 
<DNaylor at ...13086...> wrote:

> I get this message every morning with source/destination of my Snort box
> and database server respectively.  Why is Snort trying to log back into
> the SQL server every morning?
>
Hard to say without knowing a little more - like what OS are you using.

If it's unix, it *could* be syslogd HUPing the process when the logfile is 
turned over.

Paul Schmehl (pauls at ...6838...)
Adjunct Information Security Officer
University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/ir/security/




More information about the Snort-users mailing list