[Snort-users] SNORT 2.0.0 :: ODBC :: FREETDS :: SQL SERVER

permalink · #1 (**permalink**) 10-08-2003

This is a multi-part message in MIME format.

------=_NextPart_000_01F7_01C38DB3.A3E0FFC0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Dear Snort Users,

When I start SNORT using the command line "snort -b -o -i eth0 -c =
/home/pacotes/snort.network.conf" i am receiving the following message :

"
database: Problem obtaining SENSOR ID (sid) from snort->sensor
ERROR:=20
When this plugin starts, a SELECT query is run to find the sensor id =
for the
currently running sensor. If the sensor id is not found, the plugin =
will run
an INSERT query to insert the proper data and generate a new sensor id. =
Then a
SELECT query is run to get the newly allocated sensor id. If that fails =
then
this error message is generated.

Some possible causes for this error are:
* the user does not have proper INSERT or SELECT privileges
* the sensor table does not exist

If you are _absolutely_ certain that you have the proper privileges set =
and
that your database structure is built properly please let me know if =
you
continue to get this error. You can contact me at (roman@danyliw.com).

Fatal Error, Quitting..
"

My Environment :

- Snort-2.0.0 ( UnixODBC / FreeTDS )
- Linux Red Hat 9.0
- SQL Server 2000 ( Windows 2000 Server )

The user have all database permissions. With "SQL Profiler" I checked =
that the INSERT command is not executing in SQL Server, just the two =
SELECT. With ISQL, using the same user of snort, I can execute the =
SELECT and INSERT normally.

Please, I need some help to solve this problem.

Thx,

Rodrigo Lima de Oliveira

Ps.: Sorry my bad english, my real language is portuguese.
------=_NextPart_000_01F7_01C38DB3.A3E0FFC0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1264" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>
<DIV><FONT face=3DArial size=3D2>
<DIV>Dear Snort Users,</DIV>
<DIV> </DIV>
<DIV>When I start SNORT using the command =
line "snort -b -o=20
-i eth0 -c /home/pacotes/snort.network.conf" i am receiving the =
following=20
message :</DIV>
<DIV> </DIV>
<DIV>"</DIV>
<DIV>database: Problem obtaining SENSOR ID (sid) from =
snort->sensor<BR>ERROR:=20
<BR> When this plugin starts, a SELECT query is run to find the =
sensor id=20
for the<BR> currently running sensor. If the sensor id is not =
found, the=20
plugin will run<BR> an INSERT query to insert the proper data and =
generate=20
a new sensor id. Then a<BR> SELECT query is run to get the newly =
allocated=20
sensor id. If that fails then<BR> this error message is =
generated.</DIV>
<DIV> </DIV>
<DIV> Some possible causes for this error are:<BR>  * the user =
does=20
not have proper INSERT or SELECT privileges<BR>  * the sensor table =
does=20
not exist</DIV>
<DIV> </DIV>
<DIV> If you are _absolutely_ certain that you have the proper =
privileges=20
set and<BR> that your database structure is built properly please =
let me=20
know if you<BR> continue to get this error. You can contact me at =
(<A=20
href=3D"mailto:roman@danyliw.com">roman@danyliw.co m</A>).</DIV>
<DIV> </DIV>
<DIV>Fatal Error, Quitting..<BR>"</DIV>
<DIV> </DIV>
<DIV>My Environment :</DIV>
<DIV> </DIV>
<DIV>- Snort-2.0.0 ( UnixODBC / FreeTDS )</DIV>
<DIV>- Linux Red Hat 9.0</DIV>
<DIV>- SQL Server 2000 ( Windows 2000 Server )<BR></DIV>
<DIV> </DIV>
<DIV>The user have all database permissions. With "SQL Profiler" =
I checked=20
that the INSERT command is not executing in SQL Server, just =
the two=20
SELECT. With ISQL, using the same user of snort, I can execute the =
SELECT=20
and INSERT normally.</DIV>
<DIV> </DIV>
<DIV>Please, I need some help to solve this problem.</DIV>
<DIV> </DIV>
<DIV>Thx,</DIV>
<DIV> </DIV>
<DIV>Rodrigo Lima de Oliveira</DIV>
<DIV> </DIV>
<DIV>Ps.: Sorry my bad english, my real language is=20
portuguese.</DIV></FONT></DIV></FONT></DIV></BODY></HTML>

------=_NextPart_000_01F7_01C38DB3.A3E0FFC0--

-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode