RE: Acid and Sensor ID's

["Gene Gomez" <gegomez () tycoint com>]

Stop Snort.  If you're using mysql, then do this from the mysql client:

USE snort;
UPDATE sensor SET sid='<correct_sid>' WHERE hostname='<hostname>';
EXIT;

Best of luck.

Gene Gomez

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Hall, Duane
Sent: Monday, July 29, 2002 8:47 AM
To: Snort Userslist
Subject: [Snort-users] Acid and Sensor ID's


I had to reboot a sensor over the weekend and now the sensor number in ACID
has changed.  Now the alerts are not logging correctly.  Any ideas?

Duane

Duane Hall
Security Administrator
Hastings Entertainment
806-351-2300 x-3945
Duane.Hall () hastings-ent com

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GIT d+ s:- a- C+ UL++ P+ L++ E--- W++ N++ o K- w---
O- M-- V-- PS PE Y PGP t++ 5 X R- tv+ b+ DI++ D+
G e+ h---- r+++ y++++
------END GEEK CODE BLOCK------


-------------------------------------------------------
This sf.net email is sponsored by: Dice - The leading online job board
for high-tech professionals. Search and apply for tech jobs today!
http://seeker.dice.com/seeker.epl?rel_code1
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users







-------------------------------------------------------
This sf.net email is sponsored by: Dice - The leading online job board
for high-tech professionals. Search and apply for tech jobs today!
http://seeker.dice.com/seeker.epl?rel_code=31
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users