On 0, CasperLinux <CasperLinux@comcast.net> allegedly wrote:
output database: log, mysql, user=xxxxxxxxxx password=xxxxxx
dbname=snort host=[name of box]
Is this on one line or two (I'm assuming two and it looks like two thanks
to mail client line wrapping)?
IT's on a single line
ok, cool.
Did you ./configure --with-mysql or not?
I installed via Debian binaries. I did this before my system didn't work
because of a configuration problem and I had this all working. This time
around I can't figure out the problem. And of course I forgot to write down
how I fixed this the first time.
ok, well in this case it could be that the binary you have does not have mysql
support compiled into it. I think your easiest way out of this (especially if
you intend to stick with the Debian binaries for upgrading) is to use unified
output and then use barnyard to process and send to MySQL.
http://www.snort.org/dl/barnyard/
+--------------------------------------------------------------------+
Nigel Houghton Research Engineer Sourcefire Inc.
Vulnerability Research Team
There is no theory of evolution, just a list
of creatures Vin Diesel allows to live.
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
