Package: snort-mysql Version: 2.7.0-6 Severity: normal >From looking at some snort related email lists, it appears that if the rate of events that snort reports on gets low enough, the connection to MYSQL goes away, and you start getting errors about the server going away.
A temporary solution, is to restart snort, which gets a new connection. It looks like the preferred solution, is some kind of daemon which aggregates snort writes across applications (barnyard?). Debian doesn't seem to have this. I may be misunderstanding how this barnyard works. -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.21 (SMP w/2 CPU cores) Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages snort-mysql depends on: ii adduser 3.105 add and remove users and groups ii debconf [debconf-2.0] 1.5.16 Debian configuration management sy ii libc6 2.6.1-6 GNU C Library: Shared libraries ii libmysqlclient15off 5.0.45-1 MySQL database client library ii libpcap0.8 0.9.8-1 System interface for user-level pa ii libpcre3 7.3-2 Perl 5 Compatible Regular Expressi ii logrotate 3.7.1-3 Log rotation utility ii snort-common 2.7.0-6 Flexible Network Intrusion Detecti ii snort-common-libraries 2.7.0-6 Flexible Network Intrusion Detecti ii snort-rules-default 2.7.0-6 Flexible Network Intrusion Detecti ii sysklogd [system-log-da 1.5-1 System Logging Daemon ii zlib1g 1:1.2.3.3.dfsg-7 compression library - runtime snort-mysql recommends no packages. -- debconf information: * snort-mysql/db_database: snort * snort-mysql/options: * snort-mysql/stats_treshold: 1 * snort-mysql/interface: eth1 * snort-mysql/db_host: localhost * snort-mysql/address_range: 192.168.0.0/16 * snort-mysql/reverse_order: false snort-mysql/please_restart_manually: snort-mysql/config_error: * snort-mysql/configure_db: true * snort-mysql/startup: boot * snort-mysql/send_stats: true * snort-mysql/needs_db_config: * snort-mysql/stats_rcpt: root * snort-mysql/db_user: snort * snort-mysql/disable_promiscuous: false snort-mysql/config_parameters: -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
