[Snort-inline-users] snort_inline segfault with enabled database output plugin

[Joe H. <J.H...@gm...>]

hi list,

i can't find an answer anywhere, maybe i have the wrong keywords...
i'm using snort_inline 2.1.2. everything works fine, without database output
 plugin enabled.
i started snort_inline with the following command: 
/usr/local/bin/snort_inline -v -D -Q -U -y -t /var/snort_inline -l
/var/snort_inline/log -c /var/snort_inline/etc/rules/snort.conf

i don't think the chroot is the problem because without chroot, snort_inline
segfaults also.

this is the end of the output i get when i start snort manually without -D :

telnet_decode arguments:
    Ports to decode telnet on: 21 23 25 119 
database: compiled support for ( mysql )
database: configured to use mysql
database:          user = acid
database: password is set
database: database name = acid
database:          host = localhost
database:   sensor name = honeyhost
Segmentation fault

this is the database plugin line within my configfile:
output database: alert, mysql user=acid password=password dbname=acid
host=localhost sensor_name=honeyhost

i used the create_mysql script in the contrib subdir to create the database.
mysql> select * from schema;
+------+---------------------+
| vseq | ctime               |
+------+---------------------+
|  106 | 2004-05-03 11:50:53 |
+------+---------------------+
1 row in set (0.00 sec)

hope that's enough info. would be great to get a hint.

thanks
joe


-- 
"Sie haben neue Mails!" - Die GMX Toolbar informiert Sie beim Surfen!
Jetzt aktivieren unter http://www.gmx.net/info