Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Snort-Users
[Top] [All Lists]

Re: [Snort-users] snort and mysql5 losing db connection

Subject: Re: [Snort-users] snort and mysql5 losing db connection
Date: Thu, 14 Jun 2007 14:43:03 +0200
Hi Greg,

I posted this on the forums a few days ago but since there has been no
replies I am asking anyone on this list for assistance.


Most of my sensors are running on centos 4 without a problem using mysql and
base. To start getting familiar with CentOS 5 i built a test sensor which
comes with mysql 5. I compiled the latest snort 2.6.x version.

What happens if I do not get any alarms is snort loses the connection and
starts throwing various errors like

snort[7890]: database: mysql_error: MySQL server has gone away

The database is working fine. I can still connect to it.

either a timeout happened or the connection was otherwise
terminated. The client library of MySQL 4.x did a reconnect
whereas this behaviour was changed with version 5.x.

Take a look at:

  http://osdir.com/ml/security.ids.snort.devel/2006-04/msg00001.html

Best regards

Dirk

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>