On Fri, Aug 26, 2005 at 05:09:29PM -0600, Gordon Haverland wrote: > I applied the patch manually (in emacs), and ran apt-get -f > install. snort-mysql did install successfully this time. I was > prompted to create a mysql database for snort to use, which I > wrote down. However, I did not follow the instructions, thinking
That's intended for new installations, not upgrades. You are being show this probably because of a mistake in the config script (I changed the name of the debconf key, maybe I shouldn't have done it) > that the already created mysql database for snort was the same as > this would have created. Both snort and mysqld are running after > I did this, so I am guessing that everything is working again. They should be running fine as the config scripts should not have changed anything else. Just make sure you don't have an /etc/snort/db-pending-config file and all should have worked just fine. > As logcheck picks up stuff that snort-mysql spots, I should know > in an hour or two if snort-mysql is actually working. Could you provide the logcheck patterns you have for Snort? I would be interested in seeing those. Thanks Javier
signature.asc
Description: Digital signature
