Snort mailing list archives
Re: no alerts logged
From: Mat Harris <mat.harris () genestate com>
Date: Thu, 15 Jan 2004 22:57:44 +0000
On Thu, Jan 15, 2004 at 05:11:36 -0500, M. Morgan wrote:
Mat, If both snort and the mysql database are running correctly try the following. -make sure the output plugin for snort is pointing to the correct database. -make sure that snort has the correct permissions (in MySQL) to access the "snort" database tables. -there should be a database user "snort" - and permissions for snort/snort_archive/snortcenter in the databse to allow user "snort" to write to the tables. One of the above may be causing your problem depending on your snort/database type setup.
Totally my mistake, I forgot that the initscript for snort that I downloaded has to be modified as the INTERFACE var does not get passed to the command line. I hadn't changed it when I rebuilt my setup. Thanks for the ideas mat -- ----------------------------------------- + Mat Harrison | mat.harris () genestate com + | England, UK | matth () 3d-computers co uk | |--------------+--------------------------| + http://www.genestate.com + ---------------------------------------- Yes, of course it's the right cabl [le0: NO CARRIER]
Attachment:
_bin
Description:
Current thread:
- no alerts logged Mat Harris (Jan 15)
- <Possible follow-ups>
- Re: no alerts logged M. Morgan (Jan 15)
- Re: no alerts logged Mat Harris (Jan 15)
- portscan but no rules - Was: Re: no alerts logged Mat Harris (Jan 16)
- Re: no alerts logged Mat Harris (Jan 15)
- RE: no alerts logged Michael Chapman (Jan 15)
- RE: no alerts logged Michael Chapman (Jan 16)
- RE: no alerts logged Michael Chapman (Jan 16)
