[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-users
Subject:    Re: [Snort-users] Unable to run barnyard
From:       Jeremy Hoel <jthoel () gmail ! com>
Date:       2012-10-26 21:26:40
Message-ID: CAH_p-VMf7oUE_W0UCMA2qwTD1ixoiinpPGe=hSwA9gVjd6+ThQ () mail ! gmail ! com
[Download RAW message or body]

Check the apache error log and see if all the php requirements are met
and everything is setup.




On Fri, Oct 26, 2012 at 9:22 PM, fashman2k1@yahoo.com
<fashman2k1@yahoo.com> wrote:
> Thanks Jeremy it works. But when I tried to generate alert and go to hhtp://
> 127.0.0.1..... to view report the page is blank. Now no access denial but
> blank page. Pls wat do u think?
>
> From my HTC Sensation 4G on T-Mobile. The first nationwide 4G network
>
>
> ----- Reply message -----
> From: "Jeremy Hoel" <jthoel@gmail.com>
> To: "Akinwale Fasuru" <fashman2k1@yahoo.com>
> Subject: [Snort-users] Unable to run barnyard
> Date: Fri, Oct 26, 2012 4:34 pm
>
>
> replace MYPASSWORD with whatever you want.
>
> On Fri, Oct 26, 2012 at 8:32 PM, Akinwale Fasuru <fashman2k1@yahoo.com>
> wrote:
>> I will replace 'MYPASSWORD'; with my own password and in upper case or am
>> I just going to type it in as 'MYPASSWORD';
>>
>>
>>
>> --- On Fri, 10/26/12, Jeremy Hoel <jthoel@gmail.com> wrote:
>>
>>> From: Jeremy Hoel <jthoel@gmail.com>
>>> Subject: Re: [Snort-users] Unable to run barnyard
>>> To: "Akinwale Fasuru" <fashman2k1@yahoo.com>
>>> Cc: snort-users@lists.sourceforge.net
>>> Date: Friday, October 26, 2012, 3:13 PM
>>> log into mysql and run:
>>>
>>> grant all on snort.* to snort@localhost identified by
>>> 'MYPASSWORD';
>>>
>>>
>>> and then make the MYPASSWORD part the same in your by2 and
>>> base configs.
>>>
>>>
>>> On Fri, Oct 26, 2012 at 7:58 PM, Akinwale Fasuru <fashman2k1@yahoo.com>
>>> wrote:
>>> > I went checking the configuration in by2 for the mysql
>>> access creditials and found it to be what i cofigured it as,
>>> and still got stocked... how can i edit or change the
>>> password and then update it in by2?  guess may be i
>>> typed it in wrongly initially
>>> >
>>> >
>>> >
>>> >
>>> > --- On Fri, 10/26/12, Jeremy Hoel <jthoel@gmail.com>
>>> wrote:
>>> >
>>> >> From: Jeremy Hoel <jthoel@gmail.com>
>>> >> Subject: Re: [Snort-users] Unable to run barnyard
>>> >> To: "Akinwale Fasuru" <fashman2k1@yahoo.com>
>>> >> Cc: snort-users@lists.sourceforge.net
>>> >> Date: Friday, October 26, 2012, 10:57 AM
>>> >> Well this is a different error and
>>> >> like you said, it's related to mysql.
>>> >>
>>> >> You need to log into mysql and make sure that the
>>> password
>>> >> you setup
>>> >> for the snort user in mysql, is the same that is is
>>> in the
>>> >> configs for
>>> >> by2 and base.
>>> >>
>>> >> There was a number of threads about this to weeks
>>> ago in
>>> >> regards to
>>> >> mysql troubleshooting.
>>> >>
>>> >> On Fri, Oct 26, 2012 at 3:53 PM, Akinwale Fasuru
>>> <fashman2k1@yahoo.com>
>>> >> wrote:
>>> >> > Thanks Jeremy and everyone I think its work, i
>>> went
>>> >> checking the interface again. but i have this error
>>> coming
>>> >> up when i run the same command, looks like mysql
>>> >> configuration is not right i dont know what it is
>>> though..
>>> >> pls can you help.
>>> >> >
>>> >> >
>>> >> >   --== Initializing Barnyard2
>>> ==--
>>> >> > Initializing Input Plugins!
>>> >> > Initializing Output Plugins!
>>> >> > Parsing config file
>>> "/etc/snort/barnyard2.conf"
>>> >> > Log directory = /var/log/barnyard2
>>> >> > ERROR: database: mysql_error: Access denied
>>> for user
>>> >> 'snort'@'localhost' (using password: YES)
>>> >> > Fatal Error, Quitting..
>>> >> >
>>> >> >
>>> >> > I also get a similar error when I put this in
>>> the URL
>>> >> "http://127.0.0.1/base/base_main.php" Here is what i
>>> >> gath:
>>> >> >
>>> >> > Error (p)connecting to DB :
>>> snort@localhost:3306
>>> >> >
>>> >> > Check the DB connection variables in
>>> base_conf.php
>>> >> >
>>> >> >
>>> >> = $alert_dbname   : MySQL database
>>> name where
>>> >> the alerts are stored
>>> >> >
>>> >> = $alert_host     : host where
>>> the
>>> >> database is stored
>>> >> >
>>> >> = $alert_port     : port where
>>> the
>>> >> database is stored
>>> >> >
>>> >> = $alert_user     : username
>>> into the
>>> >> database
>>> >> >
>>> >> = $alert_password : password for the username
>>> >> >
>>> >> >
>>> >> > Database ERROR:Access denied for user
>>> >> 'snort'@'localhost' (using password: YES)
>>> >> >
>>> >> >
>>> >> >
>>> >> >
>>> >> >
>>> >> > --- On Thu, 10/25/12, Jeremy Hoel <jthoel@gmail.com>
>>> >> wrote:
>>> >> >
>>> >> >> From: Jeremy Hoel <jthoel@gmail.com>
>>> >> >> Subject: Re: [Snort-users] Unable to run
>>> barnyard
>>> >> >> To: "Akinwale Fasuru" <fashman2k1@yahoo.com>
>>> >> >> Cc: snort-users@lists.sourceforge.net
>>> >> >> Date: Thursday, October 25, 2012, 4:01 PM
>>> >> >> Can you look at  your barnyard2
>>> >> >> conf and see if there are two interface
>>> lines?
>>> >> >>
>>> >> >> The error says "ERROR:
>>> >> /etc/snort/barnyard2.conf(61) Config
>>> >> >> option
>>> >> >> "interface" can only be configured once."
>>> >> >>
>>> >> >> If you don't see it, share your config
>>> here, and
>>> >> maybe your
>>> >> >> init
>>> >> >> script or any other config sources
>>> (sysconfig,
>>> >> default,
>>> >> >> etc)
>>> >> >>
>>> >> >> On Thu, Oct 25, 2012 at 8:50 PM, Akinwale
>>> Fasuru
>>> >> <fashman2k1@yahoo.com>
>>> >> >> wrote:
>>> >> >> > Hello fellows,
>>> >> >> >
>>> >> >> >     I am having
>>> issues
>>> >> running
>>> >> >> barnyard, when I try to run the command
>>> >> >> >
>>> >> >> > $ sudo barnyard2 -c
>>> >> >> >
>>> >> >> > /etc/snort/barnyard2.conf -d
>>> /var/log/snort
>>> >> -f
>>> >> >> merged.log -w
>>> >> >> >
>>> >> >> > /var/log/snort/barnyard2.waldo
>>> >> >> >
>>> >> >> > Here is what I got
>>> >> >> >
>>> >> >> >
>>>    --==
>>> >> Initializing
>>> >> >> Barnyard2 ==--
>>> >> >> >
>>> >> >> > Initializing Input Plugins!
>>> >> >> >
>>> >> >> > Initializing Output Plugins!
>>> >> >> >
>>> >> >> > Parsing config file
>>> >> "/etc/snort/barnyard2.conf"
>>> >> >> >

------------------------------------------------------------------------------
WINDOWS 8 is here. 
Millions of people.  Your app in 30 days.
Visit The Windows 8 Center at Sourceforge for all your go to resources.
http://windows8center.sourceforge.net/
join-generation-app-and-make-money-coding-fast/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
[prev in list] [next in list] [prev in thread] [next in thread]