[Snort-users] Cannot get the sensors table to fill in.

permalink · #1 (**permalink**) 06-29-2007

This is a multi-part message in MIME format.

--===============0293441324==
content-class: urn:content-classes:message
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C7BA81.E0A21C9C"

This is a multi-part message in MIME format.

------_=_NextPart_001_01C7BA81.E0A21C9C
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I am running Snort 2.6.1.5-1 with mysql 5 and when I startup snort it
runs but does not right to the DB. When I last asked this question
someone told me that I should have snort logging to unified files and
then have barnyard reading the unified files and uploading the data to
mysql. So that is what I have.

=20

Now I see data in the DB but the sensor table is empty. Shouldn't this
table get populated with my different nics? I am running snort on 3
interfaces on this one node.

=20

How can I fix this??

Louis

=20

~~
-------------------------------------
Louis Bohm
Network Administrator
Adnexus Therapeutics
781.209.2324
-------------------------------------

=20

------_=_NextPart_001_01C7BA81.E0A21C9C
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:st1=3D"urn:schemas-microsoft-com:office:smarttags" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<o:SmartTagType =
namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
name=3D"PersonName"/>

<style>

</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

I am running Snort 2.6.1.5-1 with mysql 5 and when I =
startup
snort it runs but does not right to the DB.  When I last asked this =
question
someone told me that I should have snort logging to unified files and =
then have
barnyard reading the unified files and uploading the data to =
mysql.  So that is
what I have.<o:p></o:p>

<o:p> </o:p>

Now I see data in the DB but the sensor table is =
empty. 
Shouldn’t this table get populated with my different nics?  I =
am running snort
on 3 interfaces on this one node.<o:p></o:p>

<o:p> </o:p>

How can I fix this??<o:p></o:p>

Louis<o:p></o:p>

<o:p> </o:p>

~~ 
------------------------------------- 
<st1:PersonName w:st=3D"on">Louis Bohm</st1:PersonName> 
Network Administrator 
Adnexus Therapeutics 
781.209.2324 
-------------------------------------<o:p></o:p>

<o:p> </o:p>

</div>

</body>

</html>

------_=_NextPart_001_01C7BA81.E0A21C9C--

--===============0293441324==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
--===============0293441324==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============0293441324==--

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode