On Friday 26 August 2005 17:17, Javier Fernández-Sanguino Peña wrote: > On Fri, Aug 26, 2005 at 05:09:29PM -0600, Gordon Haverland wrote: > > I applied the patch manually (in emacs), and ran apt-get -f > > install. snort-mysql did install successfully this time. I > > was prompted to create a mysql database for snort to use, > > which I wrote down. However, I did not follow the > > instructions, thinking > > That's intended for new installations, not upgrades. You are > being show this probably because of a mistake in the config > script (I changed the name of the debconf key, maybe I > shouldn't have done it)
Okay, you're the expert. :-) > > that the already created mysql database for snort was the > > same as this would have created. Both snort and mysqld are > > running after I did this, so I am guessing that everything is > > working again. > > They should be running fine as the config scripts should not > have changed anything else. Just make sure you don't have an > /etc/snort/db-pending-config file and all should have worked > just fine. No db-pending-config file. > > As logcheck picks up stuff that snort-mysql spots, I should > > know in an hour or two if snort-mysql is actually working. > > Could you provide the logcheck patterns you have for Snort? I > would be interested in seeing those. I thought some of the stuff was coming from snort, maybe I am wrong. I'll get back to you on that if I find something. Have a nice weekend! Gord
