snort giving error

Posted on 2011-10-20
Last Modified: 2013-11-29
i have configured SNORT using this link

eth1 listening port connected to TEST Switch fa0/1

test switch config
monitor session 1 source vlan 10
monitor session 1 destination interface fa0/1

now when i am restarting snort its showing this error. plz guide me in this.

root@xss-240:~# /etc/init.d/snort restart
 * Starting Network Intrusion Detection System  snort                * /etc/snort/db-pending-config file found
 * Snort will not start as its database is not yet configured.
 * Please configure the database as described in
 * /usr/share/doc/snort-{pgsql,mysql}/README-database.Debian
 * and remove /etc/snort/db-pending-config


Question by:Mbhushan
    LVL 7

    Accepted Solution

    This looks like Bug 222091 which appears to have been fixed already in 2009. Please read the bug report, please ensure you have configured database access as per the mentioned document, ensure snort does not connect to the database as root but user "snort" and check if you have installed snort- or more recent?
    LVL 3

    Author Comment

    bro how to check snort version
    LVL 3

    Author Comment

    root@xss-240:~# snort -V

       ,,_     -*> Snort! <*-
      o"  )~   Version (Build 121)
       ''''    By Martin Roesch & The Snort Team:
    LVL 6

    Assisted Solution

    Hi, please read the link below if you want to run snort in a production environment since snort or older won't be supported anymore soon. You should upgrade to snort

    LVL 6

    Expert Comment

    If you are intrested here is a guide how to install snort 2.9.1 on Ubuntu 10.04 LTS.

    LVL 3

    Author Comment

    Hi Jelcin,

    i have configured snort on ubuntu 10.0.4 according to this pdf  here is the eth details.


    root@xss-240:~# ifconfig
    eth0      Link encap:Ethernet  HWaddr 00:1d:7d:22:2c:b3  
              UP BROADCAST MULTICAST  MTU:1500  Metric:1
              RX packets:0 errors:0 dropped:0 overruns:0 frame:0
              TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:1000
              RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
              Interrupt:23 Base address:0x6000

    eth1      Link encap:Ethernet  HWaddr 00:03:47:df:bb:02  
              inet addr:  Bcast:  Mask:
              inet6 addr: fe80::203:47ff:fedf:bb02/64 Scope:Link
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              RX packets:6704 errors:0 dropped:0 overruns:0 frame:0
              TX packets:4105 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:1000
              RX bytes:3985918 (3.9 MB)  TX bytes:959947 (959.9 KB

    i have done step by step as it is mentioned in pdf.  while opening snort in browser i am getting this errorr

    Table 'snort.event' doesn't exist

    please guide me
    LVL 6

    Expert Comment

    Hi, it must be a mistake in the MYSQL database. Do you still need assistance?

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
    If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    731 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now