Lowyat.NET: Latest topics by kitaserupa2000

problem with binary log in mysql

kitaserupa2000 — Tue, 30 May 2006 20:55:04 +0800

I have a huge amount of 'mysql-bin.000002' to 'mysql-bin.NNN' style logs in my mysql directory.

My question is:
1. Is it possible to run mysql without it log to the binary file?(from my.cnf it says " binary logging is required for replication"
2. How to turn off this binary logging? (i already try this method but still useless: ./mysqlbinlog --disable-log-bin /usr/local/mysql/var/mysql-bin.000001)

Thanks.

Firewall analysis

kitaserupa2000 — Thu, 18 May 2006 20:36:03 +0800

Hello All..

Firstly i hope that i post in the right section.

Currently one of my responsibilities is doing some firewall analysis for my company. Since i was new in this related field, i can't examine it in the right way. Now i refer to this site and also this site for my analysis. If u guys knows other website, maybe a good one for me to refer, please do share it with me. Thanks.

Tunneling error

kitaserupa2000 — Tue, 09 May 2006 21:30:28 +0800

Hello..
i have difficulties trying to connect my snort sensor to mysql server through stunnel (i want to make my snort sensor log all the events to remote database using stunnel).

Here is the error:

QUOTE

ERROR: database: mysql_error: Can't connect to local MySQL server through socket '/tmp/mysql.sock' (2)
Fatal Error, Quitting..

Here is some portion of my stunnel.conf

QUOTE

[mysqls]
accept = 127.0.0.1:3306
connect = 190.254.110.39:3307

Note that 190.254.110.39 is mysql database and stunnel can start successfully.

Here is some portion of snort.conf database config

QUOTE

output database: log, mysql, user=snort password=snort dbname=snort host=localhost

Here is the output from netstat -na | grep tcp

QUOTE

[root@tdc2 stunnel]# netstat -na | grep tcp
tcp 0 0 0.0.0.0:1025 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:5666 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:5335 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
tcp 0 0 :::22 :::* LISTEN
tcp 0 52 ::ffff:snort-sensor-IP:22 ::ffff:mypcIP:1720 ESTABLISHED

Questions:
1. How to make snort, log the events to remote mysql database?
2. Is it possible to route using port 80 if let say i want to put my sensor remotely and only port 80 traffic can pass through the firewall?