Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > HOWTO-Related Questions

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 29th January 2008, 14:18
tokke tokke is offline
Junior Member
 
Join Date: Aug 2007
Location: Belgium
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default Intrusion Detection: Snort, Base, MySQL, and Apache2 On Ubuntu 7.10

I'm experiencing problems with the howto: Intrusion Detection: Snort, Base, MySQL, and Apache2 On Ubuntu 7.10 (Gutsy Gibbon) (Updated)
In the beginning everything runs fine but after a while I saw that snort doesnt write anything to the mysql database anymore.
In the daemon.log file I see following error message:
snort[4350]: database: mysql_error: MySQL server has gone away SQL=BEGIN

Anyone has an idea on how to solve this?

Thx in advance

Tokke
Reply With Quote
Sponsored Links
  #2  
Old 29th January 2008, 14:37
topdog topdog is offline
Senior Member
 
Join Date: Jan 2008
Location: South Africa
Posts: 1,352
Thanks: 0
Thanked 153 Times in 150 Posts
Default

This seems to be a bug in snort not a mysql problem.

http://www.snort.org/archive-1-3159.html
__________________
----
http://www.topdog.za.net - Got Linux problems ? - I can help.
http://www.baruwa.org - Try it.
Reply With Quote
  #3  
Old 29th January 2008, 14:40
topdog topdog is offline
Senior Member
 
Join Date: Jan 2008
Location: South Africa
Posts: 1,352
Thanks: 0
Thanked 153 Times in 150 Posts
Default

Sorry my BAD it is a mysql problem that can be fixed with this
Code:
[mysqld]
#
wait_timeout = 604800
interactive_timeout = 604800
in your my.cnf

The restart mysqld.
__________________
----
http://www.topdog.za.net - Got Linux problems ? - I can help.
http://www.baruwa.org - Try it.
Reply With Quote
  #4  
Old 29th January 2008, 15:12
tokke tokke is offline
Junior Member
 
Join Date: Aug 2007
Location: Belgium
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Thx for the quick reply.
I changed the values. No I have to wait to see if it still works after a few days.
Reply With Quote
  #5  
Old 31st January 2008, 10:33
tokke tokke is offline
Junior Member
 
Join Date: Aug 2007
Location: Belgium
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by topdog
Sorry my BAD it is a mysql problem that can be fixed with this
Code:
[mysqld]
#
wait_timeout = 604800
interactive_timeout = 604800
in your my.cnf

The restart mysqld.
This didn't solve the problem. I have the same error again.
Anymore ideas?

Best regards

Tokke
Reply With Quote
  #6  
Old 31st January 2008, 11:01
topdog topdog is offline
Senior Member
 
Join Date: Jan 2008
Location: South Africa
Posts: 1,352
Thanks: 0
Thanked 153 Times in 150 Posts
 
Default

I think then it is a snort problem, from what i have picked up the snort connection does not interact with mysql in time that is why that fix was to allow for a longer time out on the client sending data to the mysql server.

Check if you are running the latests snort it could have been fixed in a newer release.
__________________
----
http://www.topdog.za.net - Got Linux problems ? - I can help.
http://www.baruwa.org - Try it.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Mandriva 10.2 Perfect Setup Install Problems... ctroyp Installation/Configuration 12 30th December 2005 16:04


All times are GMT +2. The time now is 17:59.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.