RE: snort not logging to mysql database

["Kretzer, Jason R (Big Sandy)" <jason.kretzer () kctcs edu>]

I did, but I did not find one.  I searched the archives and the closest
I found was,

http://sourceforge.net/mailarchive/message.php?msg_id=2075220

And no one replied to this person either.

-Jason
 

> -----Original Message-----
> From: Our World Is Here [mailto:info () lucretia ca] 
> Sent: Thursday, February 16, 2006 6:35 PM
> To: Kretzer, Jason R (Big Sandy)
> Subject: RE: [Snort-users] snort not logging to mysql database
>
> Other than that, this issue is hashed about 4-6 times a week 
> on the list,
> try reviewing the archives for a solution.
>
> Cheers,
>
> James Friesen, CIO
>
> Lucretia Enterprises
> "Our World Is Here..."
> Info at lucretia dot ca
> http://lucretia.ca
>
>
> > -----Original Message-----
> > From: Kretzer, Jason R (Big Sandy) [mailto:jason.kretzer () kctcs edu]
> > Sent: Monday, February 13, 2006 7:14 PM
> > To: snort-users () lists sourceforge net
> > Subject: [Snort-users] snort not logging to mysql database
> >
> >
> > Hey Gang,
> >
> > First off here are my software versions:
> > FC4, BASE 1.2.2, PHP 5.0.4, Apache/2.0.54, Snort 2.4.3, MySQL 4.1.16
> >
> > Having a bit of a problem that I cannot seem to find an
> > answer to yet and was wondering if someone could point me in
> > the right direction.  I also followed the
> > Snort_and_BASE_on_CentOS_RHEL_or_Fedora.pdf to get this set
> > up.  Everything is working except that snort is not logging
> > to the mysql database.  I uncommented the appropriate line in
> > the snort.conf
> >
> > output database: log, mysql, user=snort password=snort
> > dbname=snort host=localhost
> >
> > Everything is running.  The only thing that looks suspicious
> > are the two types of Notices in the Apache error_log
> >
> > [client 127.0.0.1] PHP Notice:  Undefined offset:  2 in
> > /var/www/html/base/includes/base_auth.inc.php on line 342
> > [client 127.0.0.1] PHP Notice:  Undefined index:  archive in
> > /var/www/html/base/base_main.php on line 75
> >
> > No other errors in any log exist that I can tell.  The
> > standard BASE https://127.0.0.1/base/base_main.php comes up
> > just fine but with no data(as in 0's and 0%'s for
> > everything).  There is an alert file for snort as I nmapped
> > every machine I had to fill it up.
> >
> > Ideas on other things I should check?
> >
> > Thanks,
> >
> > -Jason
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by: Splunk Inc. Do you grep
> > through log files for problems?  Stop!  Download the new AJAX
> > search engine that makes searching your log files as easy as
> > surfing the  web.  DOWNLOAD SPLUNK!
> > http://sel.as-us.falkag.net/sel?cmd=k
> <http://sel.as-us.falkag.net/sel?cmd=k&kid> 
> &kid3432&bid#0486&dat1642
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=ort-users
>
>
>
>   _____
>
> avast! Antivirus <http://www.avast.com> : Outbound message clean.
>
>
> Virus Database (VPS): 0607-2, 02/16/2006
> Tested on: 2/16/2006 4:34:37 PM
> avast! - copyright (c) 1988-2005 ALWIL Software.


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users