|
|
|
|
Snort Forums Archive
Archive Home » Linux » snort rc script fails when logging to remote mysql
Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.
[ Notice: Full Version of This Topic ]
snort rc script fails when logging to remote mysql
Posted by snorrr on November 17, 2005 08:51:46
Hey guys,
Just something I noticed on my gentoo box - if you configure to log stuff to mysql outside of your box, and you try to start snort at boot time with vanilla rc script - it wont.
The reason is that when you reboot your machine, the switch your box is hooked up to cycles the port through spantree delay of approx 30 seconds. If your box is fast enough to boot, it will beat that delay and snort will attempt to go out to that mysql server and fail. The go-around that would be to fork another process in vanilla rc script (/etc/init.d/snort) with --background and make that process sleep for 30-50 seconds. After that the snort will connect fine.
-Igor
-----------------------
Igor R. Manassypov
M.Eng. Network Architect
CI Investments
----------------------- |
|
Posted by Joel_Esler on January 10, 2006 14:56:56
You have to edit the vanilla rc script in order to configure it to your specific operational
environment.
Joel |
|
|
|
|
|
