RE: snort & sql

[Jason Romo <jromo () networkguardian net>]

login to mysql and run this command:

grant ALL on snort.* to snort@172.16.1.2 IDENTIFIED by
'the_password_you_set_for_snort_users'; 

or you can just echo "above" | mysql      #add a -p if you have a
password on root for mysql

Jason

On Wed, 2003-03-05 at 09:29, Morgan R. Elmore wrote:

> There might be a newer manual than the one I have, it's dated Oct 2002.
>
> Page 11 Has the MySQL Installation and Database configuration instructions.
>
> -----Original Message-----
> From: Jeremy Rodriguez [mailto:jeremyrodriguez () cmsmechanical com] 
> Sent: Tuesday, March 04, 2003 1:18 PM
> To: Snort-users () lists sourceforge net
> Subject: [Snort-users] snort & sql
>
>
> I have read Steven Scott "Snort, MySQL and ACID on RedHat 7.3" and know I am
> attepmting the setup. There are no instructions on how to setup the
> database. I get the following
> error:
>
> database: compiled support for ( mysql )
> database: configured to use mysql
> database:          user = snort
> database: password is set
> database: database name = snort
> database:          host = 172.16.1.2
> Node unique name is: 172.16.1.2
> database:   sensor name = 172.16.1.2
> database: mysql_error: Host '172.16.1.2' is not allowed to connect to this
> MySQL server Fatal Error, Quitting..
>
> I have not setup any users in the database. I am just following the
> directions. The above error happens when I run snort by :
>
> snort -dev -l /var/log/snort -i eth0 -c /etc/snort/snort.conf
>
> How do I get past this error?
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
> for complex code. Debugging C/C++ programs can leave you feeling lost and 
> disoriented. TotalView can help you find your way. Available on major UNIX 
> and Linux platforms. Try it free. www.etnus.com
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-- 
Jason Romo, Sr Security Consultant
Network Guardian Corporation
1-866-NGC-2SEC (649-2732) Office
214-764-3864 Direct (Dallas)
678-935-9694 Direct (Atlanta)
214-929-7858 Mobile
jromo () networkguardian net
http://www.networkguardian.net

Attachment: signature.asc
Description: This is a digitally signed message part