Re: Logging to a mysql database question

[Phil Wood <cpw () lanl gov>]

Have you seen any messages at start up which indicate command line override.

The snort FAQ-v1.8.1 has the following information about problems with logging.
See A3:

I don't think there is a link to it yet.  The one I have is "beta".

Q: Snort is not logging to my database

A1: You did not set up the database plugin in your configuration file.

A2: You are using an older database schema, and should update it by running the
    create scripts from the /contrib directory.

A3: You are using a command line option that overrides what you have in your
    configuration file.  This is most often -A or -s.  NOTE: If you wish to log
    to syslog as well, specify so in your configuration file rather then the
    command line.

A4: There is a problem with your database configuration itself.  Make sure the
    user you specify has the correct permissions, or that the database is even
    up and running.

On Sat, Jul 28, 2001 at 03:12:44PM +0100, Daniel Holden wrote:
> Hi All
>     I am running snort 1.8 and cannot get it to log to mysql.  I have the
> database setup correctly and can access it via snortreport but it doesn't
> show any data even though I see new data in /var/log/snort.  I think I may
> be missing some command line argument.
>     I have RTFM and everything seems to be setup right but I don't see much
> help in the way of command line arguments.
>     Any help would be appreciated.
>
>
> Daniel Holden
> dholden () idsb net
> http://www.idsb.net
>
>    __   _
>   / /  (_)__  __ ____  __
>  / /__/ / _ \/ // /\ \/ /  . . .  t h e   c h o i c e   o f   a
> /____/_/_//_/\_,_/ /_/\_\              G N U   g e n e r a t i o n .
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-- 
Phil Wood, cpw () lanl gov


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users