[Snort-users] Error Barnyard2.conf

AllowOverride allowoverride at ...11827...
Wed Oct 3 10:54:48 EDT 2012


Thanks Dave, but grant perms are correct. i wonder if this is a bug.
i'll read more on the grant page however, i followed the howto's
perfectly. matter of fact, this is the same error over and over previous
builds, i get to this point and bam! Fatal Error as stated below. 

here is show grant for snort user:

mysql> show grants;
+--------------------------------------------------------------------------------------------------------------+
| Grants for snort at ...274...
|
+--------------------------------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'snort'@'localhost' IDENTIFIED BY PASSWORD
'*HIDDEN-PW' |
| GRANT SELECT, INSERT, UPDATE, DELETE, CREATE ON `snort`.* TO
'snort'@'localhost'                             |
+--------------------------------------------------------------------------------------------------------------+
2 rows in set (0.00 sec)


and.... obviously:

 mysql -u snort -p
Enter password: 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 92
Server version: 5.5.24-0ubuntu0.12.04.1 (Ubuntu)

Copyright (c) 2000, 2011, Oracle and/or its affiliates. All rights
reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input
statement.

mysql> 



you were saying....?

anyone else?

On Wed, 2012-10-03 at 09:20 +0100, Dave Venman wrote:
> He pointed you at the "GRANT" page because of this error message in
> the log:
> 
> 
>           Oct  2 21:35:02 jupiter barnyard2[11837]: FATAL ERROR:
>         database:
>         mysql_error: Access denied for user 'snort'@'localhost' (using
>         password:
>         YES)
> 
> 
> So, GRANT the relevant privileges to "snort at ...274..." and see what
> happens.
> 
> 
> Disclaimer - I'm a Snort chap, not Barnyard . . .
> 
> On 3 October 2012 09:05, AllowOverride <allowoverride at ...11827...>
> wrote:
>         why are you pointing me to a man page or webpage??
>         
>         use mysql; select * from db; is correct
>         select * from user; is correct
>         
>         if you dont know, dont answer, but do NOT point me to a
>         webpage when im
>         following exactly with cut/paste from all the snort/barnyard2
>         howtos
>         with the same exact syntax.
>         
>         anyone else?
>         
>         open to suggestions, not man pages.
>         
>         thanks
>         
>         
>         
>         
>         On Wed, 2012-10-03 at 01:01 -0400, beenph wrote:
>         > On Wed, Oct 3, 2012 at 12:41 AM, AllowOverride
>         <allowoverride at ...11827...> wrote:
>         > > i can connect locally with mysql -u snort -p no problem.
>         > > mysql -u snort -p
>         > > Enter password:
>         > > Welcome to the MySQL monitor.  Commands end with ; or \g.
>         > > Your MySQL connection id is 87
>         > > Server version: 5.5.24-0ubuntu0.12.04.1 (Ubuntu)
>         > > ~~~
>         > > mysql>
>         > >
>         > >
>         > > when i launch barnyard2 i get this error:
>         > >
>         > >
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]: Running in
>         Continuous mode
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]:
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]:         --==
>         Initializing
>         > > Barnyard2 ==--
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]: Initializing
>         Input Plugins!
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]: Initializing
>         Output Plugins!
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]: Parsing config
>         file
>         > > "/etc/snort/etc/barnyard2.conf"
>         > >
>         > >
>         > > Oct  2 21:35:02 jupiter barnyard2[11630]: Log directory
>         > > = /var/log/barnyard2
>         > > Oct  2 21:35:02 jupiter barnyard2[11630]: Initializing
>         daemon mode
>         > > Oct  2 21:35:02 jupiter barnyard2[11837]: Daemon
>         initialized, signaled
>         > > parent pid: 11630
>         > > Oct  2 21:35:02 jupiter barnyard2[11837]: PID path stat
>         checked out ok,
>         > > PID path set to /var/run/
>         > > Oct  2 21:35:02 jupiter barnyard2[11837]: Writing PID
>         "11837" to file
>         > > "/var/run//barnyard2_eth0.pid"
>         > > Oct  2 21:35:02 jupiter barnyard2[11630]: Daemon parent
>         exiting
>         > > Oct  2 21:35:02 jupiter barnyard2[11837]: FATAL ERROR:
>         database:
>         > > mysql_error: Access denied for user
>         'snort'@'localhost' (using password:
>         > > YES)
>         > >
>         >
>         > http://dev.mysql.com/doc/refman/5.5/en/grant.html
>         >
>         > -elz
>         
>         
>         ------------------------------------------------------------------------------
>         Don't let slow site performance ruin your business. Deploy New
>         Relic APM
>         Deploy New Relic app performance management and know exactly
>         what is happening inside your Ruby, Python, PHP, Java,
>         and .NET app
>         Try New Relic at no cost today and get our sweet Data Nerd
>         shirt too!
>         http://p.sf.net/sfu/newrelic-dev2dev
>         _______________________________________________
>         Snort-users mailing list
>         Snort-users at lists.sourceforge.net
>         Go to this URL to change user options or unsubscribe:
>         https://lists.sourceforge.net/lists/listinfo/snort-users
>         Snort-users list archive:
>         http://www.geocrawler.com/redir-sf.php3?list=snort-users
>         
>         Please visit http://blog.snort.org to stay current on all the
>         latest Snort news!
>         
> 
> 
> 
> 
> -- 
> Dave
> 
> 
> 
> 





More information about the Snort-users mailing list