|
|
|
|
Snort Forums Archive
Archive Home » Windows » Snort crashes when logging to MySQL
Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.
[ Notice: Full Version of This Topic ]
Snort crashes when logging to MySQL
Posted by bobo0815 on July 25, 2006 12:44:27
Hi all,
I'm running Snort on Windows 2003 Server. When I try to log to a mysql database, snort crashes with the following error:
C:\Snort\bin>snort -c c:\snort\etc\snort.conf -l c:\snort\log -i4
Running in IDS mode
Log directory = c:\snort\log
Initializing Network Interface \Device\NPF_{847C2102-5249-47A7-9ABE-795F3EC6E33D
}
--== Initializing Snort ==--
Initializing Output Plugins!
Decoding Ethernet on interface \Device\NPF_{847C2102-5249-47A7-9ABE-795F3EC6E33D
}
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file c:\snort\etc\snort.conf
+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
No arguments to frag2 directive, setting defaults to:
Fragment timeout: 60 seconds
Fragment memory cap: 4194304 bytes
Fragment min_ttl: 0
Fragment ttl_limit: 5
Fragment Problems: 0
Self preservation threshold: 500
Self preservation period: 90
Suspend threshold: 1000
Suspend period: 30
Stream4 config:
Stateful inspection: ACTIVE
Session statistics: INACTIVE
Session timeout: 30 seconds
Session memory cap: 8388608 bytes
State alerts: INACTIVE
Evasion alerts: INACTIVE
Scan alerts: ACTIVE
Log Flushed Streams: INACTIVE
MinTTL: 1
TTL Limit: 5
Async Link: 0
State Protection: 0
Self preservation threshold: 50
Self preservation period: 90
Suspend threshold: 200
Suspend period: 30
Stream4_reassemble config:
Server reassembly: INACTIVE
Client reassembly: ACTIVE
Reassembler alerts: ACTIVE
Ports: 21 23 25 53 80 110 111 143 513 1433
Emergency Ports: 21 23 25 53 80 110 111 143 513 1433
http_decode arguments:
Unicode decoding
IIS alternate Unicode decoding
IIS double encoding vuln
Flip backslash to slash
Include additional whitespace separators
Ports to decode http on: 80
rpc_decode arguments:
Ports to decode RPC on: 111 32771
alert_fragments: INACTIVE
alert_large_fragments: ACTIVE
alert_incomplete: ACTIVE
alert_multiple_requests: ACTIVE
telnet_decode arguments:
Ports to decode telnet on: 21 23 25 119
database: compiled support for ( mysql odbc )
database: configured to use mysql
database: user = root
database: database name = snort_log
database: host = localhost
database: sensor name = XXXXXXXXX:\Device\NPF_{847C2102-5249-47A7-9ABE-795
F3EC6E33D}
File 'c:\mysql\\share\charsets\?.conf' not found (Errcode: 2)
Character set '#48' is not a compiled character set and is not specified in the
'c:\mysql\\share\charsets\Index' file
ERROR: database: mysql_error: Can't initialize character set 48 (path: default)
Fatal Error, Quitting..
C:\Snort\bin>
Can someone help?
Thx!
Bobo
|
|
Posted by bobo0815 on July 27, 2006 01:52:35
Kay, i give it up!
It's the worst MySQL compatibility i have ever seen.
I will buy eTrust Intrusion Detection ...
Bobo |
|
|
|
|
|
