RE: Mysql 101b

["Edward W. Ray" <ewray_home () mmicman com>]

Yeah, I figured it out.  I can be a dumb ass sometimes.  FYI, I had the
following uncommented in my snort.conf file:

# This example will create a rule type that will log to syslog
# and a mysql database.
# ruletype redalert
# {
#   type alert
#   output alert_syslog: LOG_AUTH LOG_ALERT
#   output database: log, mysql, user=root dbname=snort host=localhost
# }

By the way, I got your response before my question was posted to the
database.  I have been getting multiple copies of people's e-mails.
Snort-users () list sourceforge net and
snort-users-admin () lists sourceforge net 

Might want to tell folks to e-mail to one list.  I assumes snort-users
are for usual questions, where snort-admin is for the administrator (s)
of the user group or for code tweaks?

Regards,

Edward W. Ray

-----Original Message-----
From: Hicks, John [mailto:JHicks () JUSTICE GC CA] 
Sent: Wednesday, October 23, 2002 1:00 PM
To: 'Edward W. Ray'; snort-users () lists sourceforge net
Subject: RE: [Snort-users] Mysql 101b


This looks like your trying to config usage of mySQL twice??? The first
instance looks ok (database: password is set), but the repeat of this
message doesn't show that the password is set. Check your config file
for 2 lines relating to mySQL.

HTH,
John

-----Original Message-----
From: Edward W. Ray [mailto:ewray_home () mmicman com]
Sent: Wednesday, October 23, 2002 3:46 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Mysql 101b


Still having issues with mysql.  It should for root; I have the password
set properly in my snort.conf file. I had this once before when I first
set up ACID.  When will I learn to document?? I'm going to write it down
this time. 
Thanks in advance for help, here is the error: 
[root@ns2 root]# snort -U -d -c /root/.snortrc/snort.conf 
database: compiled support for ( mysql ) 
database: configured to use mysql 
database:          user = root 
database: password is set 
database: database name = snort_log 
database:          host = localhost 
database:   sensor name = 192.168.1.102 
database:     sensor id = 1 
database: schema version = 106 
database: using the "log" facility 
database: compiled support for ( mysql ) 
database: configured to use mysql 
database:          user = root 
database: database name = snort 
database:          host = localhost 
database:   sensor name = 192.168.1.102 
database: mysql_error: Access denied for user: 'root@localhost' (Using
password: NO) 
Fatal Error, Quitting.. 
[root@ns2 root]# 


Regards, 
Edward W. Ray