Home page logo
/

snort logo Snort mailing list archives

Re: Install Snort on Ubuntu with mysql and SnortReports
From: "Atkins, Dwane P" <ATKINSD () uthscsa edu>
Date: Wed, 10 Nov 2010 11:47:19 -0600

Shane,

Thank you.  I removed the entries from the rc.local and edited this barnyard2.conf 

Rc.local:

ifconfig eth0 up
        /usr/local/snort/bin/snort -D -u snort -g snort -c /usr/local/snort/etc/snort.conf -i eth0

        /usr/local/bin/barnyard2 -c /usr/local/snort/etc/barnyard2.conf

exit 0

config logdir:              /var/log/snort
config waldo_file:          /var/log/snort
config reference_file:      /usr/local/snort/etc/reference.config
config classification_file: /usr/local/snort/etc/classification.config
config gen_file:            /usr/local/snort/etc/gen-msg.map
config sid_file:            /usr/local/snort/etc/sid-msg.map

config hostname:        localhost
config interface:       eth0
config alert_with_interface_name
config alert_on_each_packet_in_stream
config daemon
config decode_data_link
config dump_payload
config dump_payload_verbose
config show_year
config umask: 002

input unified2

output database: alert, mysql, user=snort password=xxxxxx dbname=snort host=localhost

I have tested the password to login using the snort and the snort password and I do have access.

This should be more than adequate, correct?

Thank you

Dwane

------------------------------------------------------------------------------
The Next 800 Companies to Lead America's Growth: New Video Whitepaper
David G. Thomson, author of the best-selling book "Blueprint to a 
Billion" shares his insights and actions to help propel your 
business during the next growth cycle. Listen Now!
http://p.sf.net/sfu/SAP-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault