서버 보안

938,

1/47

amonre83

윈도우7에 Snort 설치시 SQL↔HSC 연결방법

http://www.hackerschool.org/HS_Boards/zboard.php?AllArticle=true&no=1154 [복사]

안녕하세요

윈도우7(64비트)에 스노트를 설치하고 있는데요,
APMsetup으로 Mysql설치 및 DB를 생성하고
스노트를 통해 발생된 log를 HSC로 보려고 했는데

Mysql과 HSC가 연결이 안되는지 HSC에서 add database가 되지 않네요;;;

원인으로 추정되는게 2 가지 있는데 ,,,

1. 아래와 같은 명령을 입력했을 때 ...
C:\Snort\bin>snort -T -l c:\snort\log -c c:\snort\etc\snort.conf -i 2
아래와 같은 경고문구가 출력되네요 ...
Snort successfully validated the configuration!
database: Closing connection to database "snort"
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! WARNING: The database output plugins are considered deprecated as
!!          of Snort 2.9.2 and will be removed in Snort 2.9.3.
!!          The recommended approach to logging is to use unified2 with
!!          barnyard2 or similar.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
database: Closing connection to database "snort"
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! WARNING: The database output plugins are considered deprecated as
!!          of Snort 2.9.2 and will be removed in Snort 2.9.3.
!!          The recommended approach to logging is to use unified2 with
!!          barnyard2 or similar.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Snort exiting

2. 현재 사용하고 있는 운영체제가 64비트인데, 스노트 구동을 위해 일부 32비트 지원 소프트웨어를 설치했네요.

저좀 도와주세요 ㅠ_ㅠ

Hit : 6122 Date : 2013/05/24 09:16