RE: Win Snort MySQL maintenance question

["Hutchinson, Andrew" <Andrew.Hutchinson () Vanderbilt edu>]

Sure.  If you just want to dump sludge and run w/o archiving the
existing data, run these commands against your db:

delete from event;
delete from data;
delete from opt;
delete from iphdr;
delete from icmphdr;
delete from tcphdr;
delete from udphdr;

If you want to keep the old data in an archive, you might want to do a
'mysqldump' of that database first, or spin the files off to tape, etc.

Andrew Hutchinson
Vanderbilt University Medical Center
Informatics / NCS / Network Security
andrew.hutchinson () vanderbilt edu

-----Original Message-----
From: Richard Roy [mailto:royr () justicetrax com] 
Sent: Wednesday, July 17, 2002 5:59 PM
To: Snort-users () lists sourceforge net
Subject: [Snort-users] Win Snort MySQL maintenance question


Is there a way to easily purge data from the mysql db like a script to
run monthly or quarterly so the db does not grow excessively?  
Thanks,
Rich


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf _______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users