Snort mailing list archives

Re: [Snort-users] regarding SNORT


From: Nick Moore <nmoore () sourcefire com>
Date: Sun, 8 Jan 2012 07:39:20 -0600

Jagan,

1. The error refers to the system's inability to find the create_mysql file
in the ./schemas directory. You may be in the wrong directory when you
executed the command or you may not have the same directory structure as
the author of the document. An easy solution would be to find the
create_mysql file (find / -name create_mysql) and then use the explicit
path in the mysql command.

2. I'm not that skilled as a database administrator, but generally use the
"grant" command within a mysql environment (mysql -p). My command looks
like this: grant all privileges on snort.* to snort@localhost with grant
option;

From what I can see in your commands you have tried, the document you are
using is not mine. You can download mine and try that approach - most of it
will work for Ubuntu/Debian even though it was written for Fedora/CentOS -
the web server stuff and how the supporting files are downloaded/updated
are different, but the Snort stuff is largely the same. Alternatively, you
can write the author of that document directly.

3. You should include the Snort users list on your replies. It will get you
responses faster and may benefit someone else.

Happy Snorting!

Nick

On Sat, Jan 7, 2012 at 1:37 AM, Jagan Mohan Reddy D <
jagan.mohan507 () gmail com> wrote:

as per the document i am installing the snort and snort packages....but

while using the following the command i am getting error...

$> mysql -­u root -­p -­D snort < ./schemas/create_mysql
bash: ./schemas/create_mysql: No such file or directory



similarly, I'm unable to use the following one ...i given mysql password
in place of YOUPASSWORD....

$> echo "grant create, insert, select, delete, update on snort.* to
snort@localhost \ identified by 'YOURPASSWORD' " | mysql ­-u root -­p

Usage: mysql [OPTIONS] [database]
  -?, --help          Display this help and exit.
  -I, --help          Synonym for -?
  --auto-rehash       Enable automatic rehashing. One doesn't need to use
                      'rehash' to get table and field completion, but
startup
                      and reconnecting may take a longer time. Disable with
                      --disable-auto-rehash.
  -A, --no-auto-rehash
                      No automatic rehashing. One has to use 'rehash' to
get
                      table and field completion. This gives a quicker
start of
                      mysql and disables rehashing on reconnect.
  -B, --batch         Don't use history file. Disable interactive behavior.
                      (Enables --silent.)
  --character-sets-dir=name
                      Directory for character set files.
  --column-type-info  Display column type information.
  -c, --comments      Preserve comments. Send comments to the server. The
                      default is --skip-comments (discard comments), enable
                      with --comments.
  -C, --compress      Use compression in server/client protocol.
  -#, --debug[=#]     This is a non-debug version. Catch this and exit.
  --debug-check       Check memory and open file usage at exit.
  -T, --debug-info    Print some debug info at exit.
  -D, --database=name Database to use.
  --default-character-set=name
                      Set the default character set.
  --delimiter=name    Delimiter to be used.
  -e, --execute=name  Execute command and quit. (Disables --force and
history
                      file.)

can u please tell me about this error....

----------------
D J M Reddy
CSIS Dept
BITS-PILANI HYD campus


On 6 January 2012 21:31, Nick Moore <nmoore () sourcefire com> wrote:

Jagan,

Please see the setup guides on snort.org/docs.

These cover step by step procedures and I believe most deal with mysql.

Happy Snorting!

Nick

On Fri, Jan 6, 2012 at 3:17 AM, Jagan Mohan Reddy D <
jagan.mohan507 () gmail com> wrote:

 I am new to snort.....!

can any one help me......

step by step installation procedure of SNORT on Ubuntu 11.10

How do i maintain snort log in the mysql....?

How do i use the SNORT dynamic pre-processor......?

please reply me any one as soon as possible...!

Thank u very much...
----------------
D J M Reddy



------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual
desktops for less than the cost of PCs and save 60% on VDI infrastructure
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest
Snort news!




--
Nick Moore, SFCE, CISSP, CISA
Sr. Systems Engineer
Voice 708-336-9041
Email nick.moore () sourcefire com
IM    nickgmoore (Yahoo)
       nickgmoore38 (AIM)

    ,,_
   o"  )~   Sourcefire - The Creators of Snort
    ''''

www.sourcefire.com         www.snort.org     www.immunet.com





-- 
Nick Moore, SFCE, CISSP, CISA
Sr. Systems Engineer
Voice 708-336-9041
Email nick.moore () sourcefire com
IM    nickgmoore (Yahoo)
       nickgmoore38 (AIM)

    ,,_
   o"  )~   Sourcefire - The Creators of Snort
    ''''

www.sourcefire.com         www.snort.org     www.immunet.com
------------------------------------------------------------------------------
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create 
new or port existing apps to sell to consumers worldwide. Explore the 
Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev
_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

Current thread: