我在安装snort时出现的这样一个问题.

h0000001

以下是问题的截屏
#snort -c /usr/local/snort/etc/snort.conf
.......
.......
database: compiled support for ( mysql )
database: configured to use mysql
database:          user = snort
database: password is set
database: database name = snort
database:          host = localhost
database:   sensor name = 192.168.10.242
database:     sensor id = 1
database: mysql_error: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'schema' at line 1
database: schema version = 0
ERROR: database: The underlying database has not been initialized correctly.  This
          version of Snort requires version 106 of the DB schema.  Your DB
          doesn't appear to have any records in the 'schema' table.
          Please re-run the appropriate DB creation script (e.g. create_mysql,
          create_postgresql, create_oracle, create_mssql) located in the
          contrib\ directory.

          See the database documentation for cursory details (doc/README.database).
          and the URL to the most recent database plugin documentation.
Fatal Error, Quitting..

根据提示我去查看数据库，发现snort库中没有schema这张表，我就依照create_mysql文件中的配置以手动的方式去建这张表，发现不能建，提示如下：

mysql> use snort;                                                               
Database changed
mysql> create table schema  ( vseq INT UNSIGNED NOT NULL, ctime DATETIME NOT NULL, PRIMARY KEY (vseq) );
ERROR 1064 (42000): You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'schema  ( vseq INT UNSIGNED NOT NULL, ctime DATETIME NOT NULL, PRIMARY KEY (vseq' at line 1
mysql> create table schema1  ( vseq INT UNSIGNED NOT NULL, ctime DATETIME NOT NULL, PRIMARY KEY (vseq) );
Query OK, 0 rows affected (0.02 sec)

mysql>
在建不了schema表之后，我把schema改成schema1就可以。小弟对mysql不是很了解，不知为什么这张表会建不了，请大家帮帮我。谢谢。。。。

[ 本帖最后由 h0000001 于 2007-2-5 18:01 编辑 ]

h0000001

没有人回答？
不过问题己经解决了，虽然我还没有搞清楚为什么建不了schema表。
因为之前我用的是mysql5,在创建数据库的时候有个information_schema的库，后来我改用myslq3,创建数据库后没有information_schema那个库，建不了schema表的原因就在这里了。为什么mysql5会多个information_schema库，看来只得去看看书了。