RE: Problem with ACID reports

[Steve Halligan <giermo () geeksquad com>]

Can you verify that data is actually going into the database?
(with a client for you database flavour--for example in mysql:
#>mysql -u snortuser -p snort
mysql>SELECT * from event;
should sit out a bunch of events.

If data is going in, what database are you using?
If no data is going in, look to snort for the problem (your database config
in snort)

and upgrade to acid 0.9.6b20 or 21 (if it is released yet)
there was a bug with oracle (i think) that involved spaces in SQL syntax.


-steve

> Hi all,
>
> I am using Snort version 1.8.3 and ACID v0.9.6b19 
>
> If I select any of these reports
>
> Last Source Ports: any , TCP , UDP 
> Last Destination Ports: any , TCP , UDP 
> Most Frequent Source Ports: any , TCP , UDP 
> Most Frequent Destination Ports: any , TCP , UDP 
>
> I get the following error:
>
> Database ERROR:Database ERROR:You have an error in your SQL 
> syntax near '' at line 1
>
> I have not been able to find any obvious problems with the 
> code but then I know nothing about SQL syntax. Anyone have any 
> ideas on a solution for the problem?
>
> Thanks,
> David
>
>
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users