Re: Error message - I need some help

[email protected] Thu, 6 Mar 2003 09:35:51 -0600
Newsgroups gmane.comp.security.ids.snort.snarf
Message-ID <[email protected]>
On Wed, Mar 05, 2003 at 10:58:14PM -0600, Ronnie Clark wrote:
> /usr/local/bin/snortsnarf -d /usr/local/www/data/ root@snort@localhost
> 
> I input my password at the prompt, but I get the following error:
> Mysql->connect(database=11;host=snort@localhost) failed: Unknown MySQL
> Server Host 'snort@localhost' (1) at
> /usr/local/libdata/snortsnarf//SnortSnarf/SnortDBInput.pm line 213
> Error connecting to snort@localhost as root; skipping

I have seen this behavior with mysql independent of snortsnarf.  
Depending on the configuration of mysql, you may have to connect to the
local mysql server using the actual hostname of the box.  What you need
to check is how your permissions are set up.

Can you connect to the database using:
	mysql snort -u root -h localhost
	mysql snort -u root -h <hostname>

What do you get when you run:
	mysqlaccess snort -u root -h localhost
	mysqlaccess snort -u root -h <hostname>
	
The place to check first is the host table in the mysql database.
Usually this is empty but you should check.  The user table in the mysql
database is the next place to check.  I assume that you have granted 
access to your database this way (and root is usually permitted to
access the data both as localhost and as <hostname>) but it is worth
a check.

Ed Davison