[ale] Snort + MySQL "Database has gone away"

[Giulio]

On Tuesday 23 October 2007 08:55, Giulio wrote:
> Hi,
>
> Wondering if other people are having the same problem:
>
> MySQL 5.0
> Snort 2.6
>
> After a while snort will complain:
>
> "database: mysql_error: MySQL server has gone away"
>
> However I know mysql is there and a snort restart will get it going
> again.
> Searched the snort forums but did not find a solution.
>
> Thanks.

Answering myself, might be useful to someone else.

The mysql <-> snort connection goes idle, mysql closes the connection, 
snort complains but does not try to reconnect.
More info and snort patch here (reg. required):

http://www.snort.org/reg-bin/forums.cgi?forum_id=4&topic_id=4983

Giulio