Bluehost.com Web Hosting $6.95

RE: [Snort-users] MySql + Snort config errors (yet again)

This is a discussion on RE: [Snort-users] MySql + Snort config errors (yet again) within the Snort forums, part of the System Security and Security Related category; Might try this on the db server: $ mysql -u root p mysql>GRANT INSERT, SELECT on snort.* to snort@...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 01-08-2004
robert schwartz
 
Posts: n/a
Default RE: [Snort-users] MySql + Snort config errors (yet again)

Might try this on the db server:

$ mysql -u root p
mysql>GRANT INSERT, SELECT on snort.* to snort@192.168.1.16 IDENTIFIED
BY 'sentinix';

Forget off the top of my head if the password requires '' or not
though... But you get the idea.

Don't use special characters in this password if you want it to work.
Every sensor needs a grant rule for it's snort@hostname btw.

> -----Original Message-----
> From: snort-users-admin@lists.sourceforge.net
> [mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of
> M. Morgan
> Sent: Thursday, January 08, 2004 12:46 PM
> To: Snort List
> Subject: [Snort-users] MySql + Snort config errors (yet again)
>
>
> Hello all,
> As many others have done I'm trying to setup a remote Snort
> sensor that will report to a central mysql database.
>
> I'm using:
> snort + snortcenter + mysql + acid
>
> on two boxes:
> 192.168.1.199 <sql server>
> 192.168.1.16 <remote snort>
>
> both boxes have the following installed.
> snort
> snortcenter
> mysql
> webmin
> acid
> nagios
>
> Both snort installs work fine if I direct them to log to
> thier local mysql databases (localhost)
>
> The error appears when I try and redirect the output of
> sensor (x.16) to the mysql server (x.199), it is as follows:
>
> Btw: im using the following output plugin:
> output database: alert, mysql, user=snort password=sentinix
> dbname=snort host=192.168.1.199 port=3306 sensor_name=[AUTO]
>
>
> ERROR: database: mysql_error: Access denied for user:
> 'snort@192.168.1.16' (Using password: YES) Fatal Error, Quitting..
> database: compiled support for ( mysql )
> database: configured to use mysql
> database: user = snort
> database: password is set
> database: database name = snort
> database: host = 192.168.1.199
> database: port = 3306
> database: sensor name = Ren
>
> I know this is a mysql access error, Ive used the webmin
> mysql server plugin to try and configure the mqsql "user" and
> "database" permissions every way I can think of and I still
> get the error.
>
> Ive googled it, Ive RTFM'ed it, Ive been working on it for
> days and Im on a time schedule...Im getting frantic here ;)
>
> I know this has been done successfully but I also realize
> this is my first attempt with mysql and it isnt working for me.
>
> I would greatly appreciate any and all help resolving this!
>
> Thanks,
> Michael
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System
> offering advanced branching capabilities and atomic changes
> on 50+ platforms. Free Eval!
> http://www.perforce.com/perforce/loadprog.> html
>
> _______________________________________________
>
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listin> fo/snort-users
>
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.p...st=snort-users
>





-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 12:31 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0