坛里有搞入侵检测的么？snort+mysql+acid数据库开不了

gracialee

D:\Snort\bin>snort -c d:\snort\etc\snort.conf
Running in IDS mode

        --== Initializing Snort ==--
Initializing Output Plugins!
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file "d:\snort\etc\snort.conf"
PortVar 'HTTP_PORTS' defined :  [ 36 80:90 311 383 591 593 631 801 818 901 972 1
220 1414 1741 1830 2301 2381 2809 3037 3057 3128 3443 3702 4000 4343 4848 5250 6
080 6988 7000:7001 7144:7145 7510 7777 7779 8000 8008 8014 8028 8080 8085 8088 8
090 8118 8123 8180:8181 8222 8243 8280 8300 8500 8800 8888 8899 9000 9060 9080 9
090:9091 9443 9999:10000 11371 34443:34444 41080 50000 50002 55555 ]
PortVar 'SHELLCODE_PORTS' defined :  [ 0:79 81:65535 ]
PortVar 'ORACLE_PORTS' defined :  [ 1024:65535 ]
PortVar 'SSH_PORTS' defined :  [ 22 ]
PortVar 'FTP_PORTS' defined :  [ 21 2100 3535 ]
PortVar 'SIP_PORTS' defined :  [ 5060:5061 5600 ]
PortVar 'FILE_DATA_PORTS' defined :  [ 36 80:90 110 143 311 383 591 593 631 801
818 901 972 1220 1414 1741 1830 2301 2381 2809 3037 3057 3128 3443 3702 4000 434
3 4848 5250 6080 6988 7000:7001 7144:7145 7510 7777 7779 8000 8008 8014 8028 808
0 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8500 8800 8888 8899 900
0 9060 9080 9090:9091 9443 9999:10000 11371 34443:34444 41080 50000 50002 55555
]
PortVar 'GTP_PORTS' defined :  [ 2123 2152 3386 ]
Detection:
   Search-Method = AC-Full-Q
    Split Any/Any group = enabled
    Search-Method-Optimizations = enabled
    Maximum pattern length = 20
Tagged Packet Limit: 256
Log directory = log
ERROR: d:\snort\etc\snort.conf(700) Unknown output plugin: "database"
Fatal Error, Quitting..

snort.conf脚本里最后一句话是：
output database:alert,mysql,host=localhost user=root password=123456 dbname=snort encoding=hex detail=full

gracialee

打不开啊打不开。。。。。

gracialee

PUD 实在是找不到人了哎？

sync765

不懂

gracialee

有懂的没？