Re: Snort

[Steve Suehring <sec@braingia.org>]

There should be some logging taking place, hopefully from snort itself.  
One thing to try, which will all but rule out a permissions issue would be 
to try to connect using the MySQL CLI as the user you setup.  So, 
something like this:

mysql -u snortuser -p snort

Probably wouldn't hurt to show tables within that database.

One other idea would be to jump onto the snort users mailing list or 
(preferably) check the archive for that list.  This problem has come up 
before and isn't debian specific.

http://marc.theaimsgroup.com/?l=snort-users

Steve

On Mon, Feb 17, 2003 at 10:19:24AM -0500, Phillip Hofmeister wrote:
> All,
> 
> I have been having problems with snort, this may be kind of OT for this
> list (should be debian-user) but I have a feeling more people on this
> list use snort.
> 
> I manage 2 potato converted to woody machines.  Each morning I receive 2
> blank reports from cron.daily.
> 
> I have snort-mysql installed.  snort appears to be running fine but
> nothing ever gets written to the mysql database.  The username/password
> I gave snort have update/select/insert rights to the mysql DB.
> 
> Any clue of where I can start looking for problems as to why this isn't
> working?
> 
> Thanks,
> 
> -- 
> Phil
> 
> PGP/GPG Key:
> http://www.zionlth.org/~plhofmei/
> wget -O - http://www.zionlth.org/~plhofmei/key.txt | gpg --import
> --
> Excuse #198: Interference from lunar radiation 
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org