trellix-enterprise / mysql-audit

AUDIT Plugin for MySQL. See wiki and readme for description. If you find the plugin useful, please star us on GitHub. We love stars and it's a great way to show your feedback.
Other
239 stars 57 forks source link

Doesent Work with MySQL 5.7.26 #210

Open jai3091 opened 5 years ago

jai3091 commented 5 years ago

Tried installing the latest snapshot version with MySQL 5.7.26 and for the offset tried the below offset: audit_json_log_file = /var/log/mysql/audit.log audit_record_cmds = SELECT,INSERT,UPDATE,DELETE,SHOW,CREATE,DROP audit_json_file = ON audit_validate_checksum=OFF plugin_load=AUDIT=libaudit_plugin.so audit_offsets=8248, 8296, 3960, 5216, 528, 360, 0, 32, 64, 160, 608, 8412, 4720, 3648, 3656, 3660, 6496, 2072, 8, 7480, 7520, 7504, 13904, 148, 672

Please let me know if there is anything that I could do. I tried compiling mysql with the following commands: cmake . -DENABLE_DOWNLOADS=1 -DWITH_DEBUG=1 -DDOWNLOAD_BOOST=1 -DWITH_BOOST=/app make install

dverbeeck commented 5 years ago

jai, I am running 5.7.26, but the offsets I captured differ slightly from yours:

{"5.7.26","d1053c89be9561025297cf3a3ee93158", 7824, 7872, 3632, 4792, 456, 360, 0, 32, 64, 160, 536, 7988, 4360, 3648, 3656, 3660, 6072, 2072, 8, 7056, 7096, 7080, 13472, 148, 672},