Re: [Snort-users] Information Not Appearing On ACID Console

This is a discussion on Re: [Snort-users] Information Not Appearing On ACID Console within the Snort forums, part of the System Security and Security Related category; --=-YTRX4nwZuWXXTiOap3OF Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hello, I don't use webmin myself, so i can'...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 10-08-2003
Valter Santos
 
Posts: n/a
Default Re: [Snort-users] Information Not Appearing On ACID Console


--=-YTRX4nwZuWXXTiOap3OF
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Hello,

I don't use webmin myself, so i can't help you on this one.
About alerts not appearing on ACID, be sure that your
/etc/snort/snort.conf is well configured to output alerts to mysql
database instead of flat files... you should have something like this in
your snort.conf, on step #3: Configure output plugins:

output database: log, mysql, user=3D<mysql_user> password=3D<mysql_passwd>
dbname=3D<mysql_database> host=3D<mysql_host> sensor_name=3D<sensor_name>

then restart your snortd deamon:

/etc/init.d/snortd restart

or=20

/usr/local/bin/snort -i eth0 -D -c /etc/snort/snort.conf


hope this help
/valter


On Wed, 2003-10-08 at 14:19, Kaplan, Andrew H. wrote:
> The information does scroll across the screen. However, the network infor=

mation
> and alerts are nor appearing on ACID. They are being logged to an alert f=

ile
> located in the /var/log/snort directory.=20
>=20
> In short -- I can start snort only from the command line, and the ACID co=

nsole
> is not displaying anything.[/b]=20


--=20

---..---..---..---..---..---..---..---..---..---..---..---..----
Valter Santos
keys @ http://devfusion.net/~vsantola/
E2A4B206 @ 99FA 3D80 4B54 BA70 7DD7 C751 47BA 49BC E2A4 B206
---------------------------------------------------------------


--=-YTRX4nwZuWXXTiOap3OF
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQA/hB/6R7pJvOKksgYRAlNnAJwJ50yO9sVVWcSDtAplORZMWC3ElQCgo fVc
nFeVzNIxAXx7rveY42WArfQ=
=lURW
-----END PGP SIGNATURE-----

--=-YTRX4nwZuWXXTiOap3OF--



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 02:28 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0