Re: Error Barnyard2.conf

[AllowOverride <allowoverride () gmail com>]

Thanks Dave, but grant perms are correct. i wonder if this is a bug.
i'll read more on the grant page however, i followed the howto's
perfectly. matter of fact, this is the same error over and over previous
builds, i get to this point and bam! Fatal Error as stated below. 

here is show grant for snort user:

mysql> show grants;
+--------------------------------------------------------------------------------------------------------------+
| Grants for snort@localhost
|
+--------------------------------------------------------------------------------------------------------------+
| GRANT USAGE ON *.* TO 'snort'@'localhost' IDENTIFIED BY PASSWORD
'*HIDDEN-PW' |
| GRANT SELECT, INSERT, UPDATE, DELETE, CREATE ON `snort`.* TO
'snort'@'localhost'                             |
+--------------------------------------------------------------------------------------------------------------+
2 rows in set (0.00 sec)


and.... obviously:

 mysql -u snort -p
Enter password: 
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 92
Server version: 5.5.24-0ubuntu0.12.04.1 (Ubuntu)

Copyright (c) 2000, 2011, Oracle and/or its affiliates. All rights
reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input
statement.

mysql> 



you were saying....?

anyone else?

On Wed, 2012-10-03 at 09:20 +0100, Dave Venman wrote:
> He pointed you at the "GRANT" page because of this error message in
> the log:
>
>
>           Oct  2 21:35:02 jupiter barnyard2[11837]: FATAL ERROR:
>         database:
>         mysql_error: Access denied for user 'snort'@'localhost' (using
>         password:
>         YES)
>
>
> So, GRANT the relevant privileges to "snort@localhost" and see what
> happens.
>
>
> Disclaimer - I'm a Snort chap, not Barnyard . . .
>
> On 3 October 2012 09:05, AllowOverride <allowoverride () gmail com>
> wrote:
>         why are you pointing me to a man page or webpage??
>         
>         use mysql; select * from db; is correct
>         select * from user; is correct
>         
>         if you dont know, dont answer, but do NOT point me to a
>         webpage when im
>         following exactly with cut/paste from all the snort/barnyard2
>         howtos
>         with the same exact syntax.
>         
>         anyone else?
>         
>         open to suggestions, not man pages.
>         
>         thanks
>         
>         
>         
>         
>         On Wed, 2012-10-03 at 01:01 -0400, beenph wrote:
>         > On Wed, Oct 3, 2012 at 12:41 AM, AllowOverride
>         <allowoverride () gmail com> wrote:
>         > > i can connect locally with mysql -u snort -p no problem.
>         > > mysql -u snort -p
>         > > Enter password:
>         > > Welcome to the MySQL monitor.  Commands end with ; or \g.
>         > > Your MySQL connection id is 87
>         > > Server version: 5.5.24-0ubuntu0.12.04.1 (Ubuntu)
>         > > ~~~
>         > > mysql>
>         > >
>         > >
>         > > when i launch barnyard2 i get this error:
>         > >
>         > >
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]: Running in
>         Continuous mode
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]:
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]:         --==
>         Initializing
>         > > Barnyard2 ==--
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]: Initializing
>         Input Plugins!
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]: Initializing
>         Output Plugins!
>         > > Oct  2 21:34:40 jupiter barnyard2[11630]: Parsing config
>         file
>         > > "/etc/snort/etc/barnyard2.conf"
>         > >
>         > >
>         > > Oct  2 21:35:02 jupiter barnyard2[11630]: Log directory
>         > > = /var/log/barnyard2
>         > > Oct  2 21:35:02 jupiter barnyard2[11630]: Initializing
>         daemon mode
>         > > Oct  2 21:35:02 jupiter barnyard2[11837]: Daemon
>         initialized, signaled
>         > > parent pid: 11630
>         > > Oct  2 21:35:02 jupiter barnyard2[11837]: PID path stat
>         checked out ok,
>         > > PID path set to /var/run/
>         > > Oct  2 21:35:02 jupiter barnyard2[11837]: Writing PID
>         "11837" to file
>         > > "/var/run//barnyard2_eth0.pid"
>         > > Oct  2 21:35:02 jupiter barnyard2[11630]: Daemon parent
>         exiting
>         > > Oct  2 21:35:02 jupiter barnyard2[11837]: FATAL ERROR:
>         database:
>         > > mysql_error: Access denied for user
>         'snort'@'localhost' (using password:
>         > > YES)
>         > >
>         >
>         > http://dev.mysql.com/doc/refman/5.5/en/grant.html
>         >
>         > -elz
>         
>         
>         ------------------------------------------------------------------------------
>         Don't let slow site performance ruin your business. Deploy New
>         Relic APM
>         Deploy New Relic app performance management and know exactly
>         what is happening inside your Ruby, Python, PHP, Java,
>         and .NET app
>         Try New Relic at no cost today and get our sweet Data Nerd
>         shirt too!
>         http://p.sf.net/sfu/newrelic-dev2dev
>         _______________________________________________
>         Snort-users mailing list
>         Snort-users () lists sourceforge net
>         Go to this URL to change user options or unsubscribe:
>         https://lists.sourceforge.net/lists/listinfo/snort-users
>         Snort-users list archive:
>         http://www.geocrawler.com/redir-sf.php3?list=snort-users
>         
>         Please visit http://blog.snort.org to stay current on all the
>         latest Snort news!
>         
>
>
>
>
> -- 
> Dave


------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!