[Snort-users] help on snort

Joel Esler jesler at ...1935...
Sun Mar 4 10:18:01 EST 2012


-T means you are running in test mode. You validated your configuration. Exactly what it's supposed to do. 

The warning indicates that you are using the MySQL output method, which we will be removing in the next version of Snort. 

Try replacing -T with -D. 

--
Joel Esler

On Mar 3, 2012, at 11:28 PM, Jagan Mohan Reddy D <jagan.mohan507 at ...14542....> wrote:

> I'm running snort on Ubuntu10.04
> 
> I used the following command to run snort...
> 
> $ sudo /usr/local/snort/bin/snort --daq-dir=/usr/local/lib/daq -c /usr/local/snort/etc/snort.conf -T
> 
> 
> I'm always getting the following warning....
> 
> Snort successfully validated the configuration!
> database: Closing connection to database "snort"
> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
> !! WARNING: The database output plugins are considered deprecated as
> !!          of Snort 2.9.2 and will be removed in Snort 2.9.3.
> !!          The recommended approach to logging is to use unified2 with
> !!          barnyard2 or similar.
> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
> database: Closing connection to database "snort"
> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
> !! WARNING: The database output plugins are considered deprecated as
> !!          of Snort 2.9.2 and will be removed in Snort 2.9.3.
> !!          The recommended approach to logging is to use unified2 with
> !!          barnyard2 or similar.
> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
> Snort exiting
> 
> 
> Can any help me on this.....
> 
> 
> 
> ----------------
> Thanks & Regards 
> D J M Reddy
> ------------------------------------------------------------------------------
> Virtualization & Cloud Management Using Capacity Planning
> Cloud computing makes use of virtualization - but cloud computing 
> also focuses on allowing computing to be delivered as a service.
> http://www.accelacomm.com/jaw/sfnl/114/51521223/
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120304/843d7ed1/attachment.html>


More information about the Snort-users mailing list