LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 03-30-2009, 05:30 AM   #1
priyadarshan
Member
 
Registered: Feb 2009
Location: Ahmedabad, Gujarat, India
Posts: 197

Rep: Reputation: Disabled
Question Database error Snort


I have installed snort and I too have checked it by applying rules in local.rules.........It logs the packet properly...............But when I went for database......


I found the following problem:-

I configured databse mysql by,

mysqladmin -u root password "<mypassword>"

mysql -u root -p

than I created snort database by,

mysql> create database snort;

mysql> grant CREATE, INSERT, SELECT, DELETE, UPDATE \
on snort.* to snort@localhost;

mysql> SET PASSWORD FOR snort@localhost=PASSWORD('mypassword');

mysql> exit


# cd /usr/local/src/snort-x.x.x/schemas/

# mysql -u root -p < create_mysql snort

than I logged into mysql by,

# mysql -u root -p
Password: <I entered password>
mysql> use snort;
mysql> show tables;


All things were OK till now...........




Now to configure snort.conf to store alerts in database

I removed comment from the line
output database: log, mysql, user=snort password=mypass dbname=snort host=localhost

But when than after I ran it by,


sudo snort -c /etc/snort/snort.conf -i eth1 -l /var/log




I got the following error:-

ERROR: database: mysql_error: Access denied for user 'root'@'localhost' (Using password:YES)
Fatal Error, Quitting..
device eth1 left premiscuous mode
audit (1238407935.129:16): dev=eth1 prom=0 old_prom=256 auid=4294967295
 
Old 03-30-2009, 05:41 AM   #2
priyadarshan
Member
 
Registered: Feb 2009
Location: Ahmedabad, Gujarat, India
Posts: 197

Original Poster
Rep: Reputation: Disabled
Ya I got tthe things bit solved by applying root name localhost name and password but still things persist here as:-

ERROR: database: mysql_error:can't connect to mysql server on '<local host>' (111) fatal error
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Snort not logging everything to the database abefroman Linux - Software 6 04-29-2008 08:07 AM
Snort database: Closing connection to database "" Homer Glemkin Linux - Security 2 07-14-2005 06:58 PM
snort logging to database ilnli Linux - General 14 04-08-2005 12:55 PM
Snort Database Help roastmules Linux - Security 2 02-24-2005 01:05 PM
snort with mysql database zuessh Linux - Security 4 10-18-2004 12:36 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 04:12 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration