Snort mailing list archives
RE: acid database error 127
From: BShinn () empirecorp org
Date: Thu, 15 Nov 2001 10:05:16 -0500
In MySQL > 3.23 you can also run " CHECK TABLE acid_event; REPAIR TABLE acid_event; CHECK TABLE event; REPAIR TABLE event; That fixed the error for me about 20 minutes ago. See http://www.mysql.com/documentation/mysql/bychapter/manual_MySQL_Database_Adm inistration.html#CHECK_TABLE for more information. -----Original Message----- From: roman () danyliw com [mailto:roman () danyliw com] Sent: Thursday, November 15, 2001 4:31 AM To: Clay Caviness Cc: snort-users () lists sourceforge net Subject: Re: [Snort-users] acid database error 127 Most likely one of the database tables is corrupt. Use myisamchk to examine and potentially fix any corruptions in the database. Roman
i'm getting an error 127 from acid now, ever since a crash about a week ago. alerts are still being inserted into the database, and snort is still running normally, but acid no longer works. any hints? debugging output from acid is below: -- Session Registered History depth = 1 URL: '/acid/acid_main.php' (referred by: 'http://boobah.com/acid/') PARAMETERS: '' CLIENT: Mozilla/4.5 (compatible; OmniWeb/4.1-sneaky-peek-10; Mac_PowerPC) SERVER: Apache/1.3.19 (Unix) DAV/1.0.2 PHP/4.0.6 mod_ssl/2.8.4 OpenSSL/0.9.6b SERVER HW: OpenBSD scootch 3.0 GENERIC#2 i386 DATABASE TYPE: mysql DB ABSTRACTION VERSION: PHP VERSION: 4.0.6 PHP API: apache SESSION ID: 1f93bf5e7c519f088fe664164debf959( 18236 bytes ) Checking for DB abstraction lib in '/var/www/htdocs/adodb/adodb.inc.php' sensor #1: event.cid = 45640, acid_event.cid = 45613 Added 27 alert(s) to the Alert cache Queried on : Wed November 14, 2001 20:53:44 Database: snort@localhost (schema version: 104) Time window: [2001-07-26 00:45:06] - [2001-11-14 20:53:07] Database ERROR:Database ERROR:Got error 127 from table handler SELECT COUNT(DISTINCT acid_event.ip_src), COUNT(DISTINCT
acid_event.ip_dst)
FROM acid_event SELECT COUNT(DISTINCT acid_event.ip_src), COUNT(DISTINCT
acid_event.ip_dst)
FROM acid_event -- thanks. -- Clay Caviness mailto:clay () boobah com http://boobah.com/clay/ voice: 201/626-3504 mobile: 917/592-9338 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
--------------------------------------------- This message was sent using Voicenet WebMail. http://www.voicenet.com/webmail/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- acid database error 127 Clay Caviness (Nov 14)
- <Possible follow-ups>
- Re: acid database error 127 roman (Nov 15)
- RE: acid database error 127 BShinn (Nov 15)
- RE: acid database error 127 Clay Caviness (Nov 15)