Re: [Snort-users] MySql + Snort config errors (yet again)

This is a discussion on Re: [Snort-users] MySql + Snort config errors (yet again) within the Snort forums, part of the System Security and Security Related category; It looks like mysql is denying the connection for snort from 192.168.1.16 I would say add permissions ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 01-08-2004
Leonard Miller
 
Posts: n/a
Default Re: [Snort-users] MySql + Snort config errors (yet again)

It looks like mysql is denying the connection for snort from
192.168.1.16
I would say add permissions to mysql so snort can connect from
192.168.1.16

But I could be wrong.

>>> "M. Morgan" <mikemorgan@mindspring.com> 01/08/04 03:46PM >>>

Hello all,
As many others have done I'm trying to setup a remote Snort sensor
that will report to a central mysql database.

I'm using:
snort + snortcenter + mysql + acid

on two boxes:
192.168.1.199 <sql server>
192.168.1.16 <remote snort>

both boxes have the following installed.
snort
snortcenter
mysql
webmin
acid
nagios

Both snort installs work fine if I direct them to log to thier local
mysql databases (localhost)

The error appears when I try and redirect the output of sensor (x.16)
to the mysql server (x.199), it is as follows:

Btw: im using the following output plugin:
output database: alert, mysql, user=snort password=sentinix
dbname=snort host=192.168.1.199 port=3306 sensor_name=[AUTO]


ERROR: database: mysql_error: Access denied for user:
'snort@192.168.1.16' (Using password: YES)
Fatal Error, Quitting..
database: compiled support for ( mysql )
database: configured to use mysql
database: user = snort
database: password is set
database: database name = snort
database: host = 192.168.1.199
database: port = 3306
database: sensor name = Ren

I know this is a mysql access error, Ive used the webmin mysql server
plugin to try and configure the mqsql "user" and "database" permissions
every way I can think of and I still get the error.

Ive googled it, Ive RTFM'ed it, Ive been working on it for days and Im
on a time schedule...Im getting frantic here ;)

I know this has been done successfully but I also realize this is my
first attempt with mysql and it isnt working for me.

I would greatly appreciate any and all help resolving this!

Thanks,
Michael


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 03:48 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0