From owner-freebsd-questions@FreeBSD.ORG  Tue Jul  4 19:39:24 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E580D16A4E5
	for <freebsd-questions@freebsd.org>;
	Tue,  4 Jul 2006 19:39:24 +0000 (UTC) (envelope-from csar@123.com.sv)
Received: from asgard1.americatelsal.com (asgard2.americatelsal.com
	[200.13.161.7]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4BA6D43D4C
	for <freebsd-questions@freebsd.org>;
	Tue,  4 Jul 2006 19:39:24 +0000 (GMT) (envelope-from csar@123.com.sv)
Received: (qmail 89331 invoked from network); 4 Jul 2006 19:57:52 -0000
Received: from unknown (HELO ?192.168.10.251?) (200.13.161.68)
	by asgard1.americatelsal.com with SMTP; 4 Jul 2006 19:57:52 -0000
Message-ID: <44AAC413.6080907@123.com.sv>
Date: Tue, 04 Jul 2006 13:40:03 -0600
From: =?ISO-8859-1?Q?C=E9sar_Amaya?= <csar@123.com.sv>
User-Agent: Thunderbird 1.5.0.4 (Windows/20060516)
MIME-Version: 1.0
To: Kevin Kinsey <kdk@daleco.biz>
References: <44AA9A86.5000602@123.com.sv> <44AAA2DD.20108@daleco.biz>
In-Reply-To: <44AAA2DD.20108@daleco.biz>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
Cc: freebsd-questions@freebsd.org
Subject: Re: snort and mysql connection at start troubles
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Jul 2006 19:39:25 -0000

Kevin Kinsey wrote:
> César Amaya wrote:
>> Hi list
>>
>> I am installing SNORT 2.4.5 to log into a MySQL-5.1 database. snort 
>> logs are being stored fine into the db, but whe the system start 
>> snort fails because of this: snort[396]: FATAL ERROR: database: 
>> mysql_error: Can't connect to local MySQL server through socket 
>> '/tmp/mysql.sock' (2)
>>
>> this is the configuration line in the snort.conf file
>>
>> output database: log, mysql, user=snortids password=PswIdS 
>> dbname=snort host=localhost
>>
>> when I changed the 'localhost' name to 127.0.0.1 I got the following 
>> error
>>
>> snort[401]: FATAL ERROR: database: mysql_error: Can't connect to 
>> MySQL server on '127.0.0.1' (61)
>>
>> All of this happens at start time. After system started I start snort 
>> manually and connect to mysql just fine.
>>
>> It seems that snort start earlier than mysql. I want to start mysql 
>> earlier than snort but I don´t know how.
>>
>> Can some body help me?
>>
>
> I think you should take a look at rcorder(8).
>
> Kevin Kinsey
>
I got mysql-server to start before snort

proxy# rcorder /etc/rc.d/* /usr/local/etc/rc.d/*
/usr/local/etc/rc.d/apache22.sh
/etc/rc.d/DAEMON
/etc/rc.d/LOGIN
/usr/local/etc/rc.d/mysql-server
/usr/local/etc/rc.d/snort
/etc/rc.d/ypxfrd

even though, I still have the same problem
snort[471]: FATAL ERROR: database: mysql_error: Can't connect to local 
MySQL server through socket '/tmp/mysql.sock' (2)

Any thought?