Hello,
I trying to learn OSSEC and would like to get OSSEC working with DB
support. But I'm having these troubles.
2010/08/04 14:38:24 ossec-dbd(5202): ERROR: Error connecting to
database '192.168.88.131'(ossec): ERROR: Can't connect to MySQL server
on '192.168.88.131' (111).
2010/08/04 14:38:36 ossec-dbd(5202): ERROR: Error connecting to
database '192.168.88.131'(ossec): ERROR: Can't connect to MySQL server
on '192.168.88.131' (111).
2010/08/04 14:46:40 ossec-dbd(5202): ERROR: Error connecting to
database '192.168.88.131'(ossec): ERROR: Can't connect to MySQL server
on '192.168.88.131' (111).
2010/08/04 14:48:13 ossec-dbd(5203): ERROR: Error executing query
'INSERT INTO data(id, server_id, user, full_log) VALUES ('5', '1',
'(none)', 'Aug 4 14:48:09 ossec2-local dhclient: can`t create
/var/lib/dhcp3/dhclient.eth0.leases: Permission denied') '. Error:
'Duplicate entry '5-1' for key 1'.
2010/08/04 14:48:13 ossec-dbd(5209): INFO: Closing connection to database.
2010/08/04 14:48:13 ossec-dbd(5210): INFO: Attempting to reconnect to database.
2010/08/04 14:48:13 ossec-dbd: Connected to database 'ossec' at '127.0.0.1'.
2010/08/04 14:48:13 ossec-dbd(5204): ERROR: Database error. Unable to run query.
2010/08/04 14:48:13 ossec-dbd(5203): ERROR: Error executing query
'INSERT INTO alert(id,server_id,rule_id,timestamp,location_id,src_ip)
VALUES ('5', '1', '1002','1280954893', '2', '0')'. Error: 'Duplicate
entry '5-1' for key 1'.
2010/08/04 14:48:13 ossec-dbd(5209): INFO: Closing connection to database.
2010/08/04 14:48:13 ossec-dbd(5210): INFO: Attempting to reconnect to database.
2010/08/04 14:48:13 ossec-dbd: Connected to database 'ossec' at '127.0.0.1'.
2010/08/04 14:48:13 ossec-dbd(5204): ERROR: Database error. Unable to run query.
2010/08/04 14:48:36 ossec-dbd(5202): ERROR: Error connecting to
database '192.168.88.131'(ossec): ERROR: Can't connect to MySQL server
on '192.168.88.131' (111).
2010/08/04 14:49:24 ossec-dbd(5202): ERROR: Error connecting to
database '192.168.88.131'(ossec): ERROR: Can't connect to MySQL server
on '192.168.88.131' (111).
What does this error message mean. I searched but can not find any help on 5204
Thanks,
Mike
