December 7th, 2004, 08:15

When starting Barnyard with snort/sguil, it failed connect to MySQL 4.0.22.
Snort version is 2.2.0, Sguil version is 0.5.2.

The following is typical error:

# barnyard -c barnyard.conf -d /nsm -g -s -f snort.log -w -waldo.file &
[2] 1509
root@at [7:56pm] [...etc/snort]# Barnyard Version 0.2.0 (Build 32)
Opened spool file '/nsm/snort.log.1102256375'
Connect from sock12
Validating sensor access: : ALLOWED
Sensor Data Rcvd: RTEvent |||system-info|at||Barnyard started.||||||||
SYSTEM INFO: {} {} system-info at {} {Barnyard started.} {} {} {} {} {} {} {} {}
Sending sock11: InsertSystemInfoMsg at Barnyard started.
Failed to connect to database sguil:mypassword@at/sguildb: Host '' is not allowed to connect to this MySQL server
Fatal Error, Quitting..
Sensor Data Rcvd:
Sensor Cmd Unkown (sock12):
Socket sock12 closed

I don't know why I my domain name "" is used to connect to the MySQL server. There may be some configuration error somewhere in thd dust.

What might be a possible way to fix this error?

Your suggestion is highly appreciated.


December 7th, 2004, 15:20
Looks like you're having numerous problems with setting this up. You might want to join #snort-gui on and get some 'active' help.