RE: No alerts on ACID

["Harper, Patrick" <patrick.harper () phns com>]

I agree, this is answered by a basic Google search.  If you Google for
/tmp/mysql.sock snort and root around in the first page you will find
the following.  Took all of 30 seconds.  It is from the Acid FAQ
(http://www.andrew.cmu.edu/user/rdanyliw/snort/acid_faq.html), imagine
that, hehe

(D-3) Common MySQL error messages 

Warning: Can't connect to local MySQL server through socket
'/var/lib/mysql/mysql.sock' (111) 
Warning: Can't connect to local MySQL server through socket
'/tmp/mysql.sock' (111) 

MySQL has been configured to communicate over a UNIX domain socket, but
this socket file could not be found in the default directory. 
Verify that the MySQL server has been started. 

Verify that the mysql.sock file exists in the directory listed in the
error and confirm that the appropriate permission have been set (the
user running the MySQL daemon needs to have at least read access). 
The socket file is often found in /tmp or /var/lib/mysql. 


If the socket file does not exist in the directory indicated in the
error message, the location must be explicitly specified. Use the
--socket switch of the MySQL server (mysqld --socket=path_to_socket) to
set the correct socket directory or set the path in the MySQL
configuration file my.cnf as follows: 
       [client]
       socket=path-for-socket-file

       [mysqld]
       socket=path-for-socket-file
     
Modifying the my.cnf fixes this issue for mysqld. A PHP specific fix
would involve modifying the mysql.default_socket variable in php.ini to
specify the full path to the socket file. 

 
-----Original Message-----
From: prabu [mailto:prabu333 () hotpop com] 
Sent: Monday, October 18, 2004 11:52 PM
To: support; 'Patrick S. Harper'; snort-users () lists sourceforge net
Subject: Re: [Snort-users] No alerts on ACID



> Hi
>
> Today I got the error mesg when I starting the acid console for the 
> 1st time after restarting ,
>
> Warning: mysql_pconnect(): Can't connect to local MySQL server through

> socket '/tmp/mysql.sock' (2) in 
> /www/htdocs/adodb/drivers/adodb-mysql.inc.php on line 335

This is the very basic step in working with any databases.You need to
start the mysql deamon (server),before accessing your database.

Fisrt of all,please spend sometime on working with basic mysql commands
and refer the mysql tutorials.Otherwise,it iwill be  nightmare
connecting snort with mysql.

Regards,
Prabu.S
Software Engineer,
www.visolve.com



---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004



-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give
us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find
out more http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users






Disclaimer:
This electronic message, including any attachments, is confidential and intended solely for use of the intended 
recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by 
applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have 
received this message in error, please delete it and notify the sender immediately. 





-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users