Re: purging mysql logs for snort

["Ahmad Masood Shah" <jahil () 66-uetclub com>]

thanks it's working like charm; you guys always gr8 regarding help :)


-- 

Best Regs,
Masood Ahmad Shah
System Administrator

^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
|   * * * * * * * * * * * * * * * * * * * * * * * *
|   Fibre Net (Pvt) Ltd. Lahore, Pakistan
|   Tel: +92-42-6677024
|   Mobile: +92-300-4277367
|   http://www.fibre.net.pk
|   * * * * * * * * * * * * * * * * * * * * * * * *
^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

----- Original Message ----- 
From: "Dusty Hall" <halljer () auburn edu>
To: <jahil () 66-uetclub com>; <snort-users () lists sourceforge net>
Sent: Monday, August 11, 2003 6:49 PM
Subject: Re: [Snort-users] purging mysql logs for snort


| Most will say phpMyAdmin, but it seems to slow for me, try these:
|
| -- delete from event,iphdr,tcphdr,udphdr,icmphdr,opt,data where
| sid='$sid' and cid='$cid'";
| -- delete from acid_ag_alert where ag_sid='$sid' and ag_cid='$cid'
| -- delete from acid_event where sid=$sid' and cid='$cid'
|
| Here's a script to automate this;
|  http://www.perlmonks.com/index.pl?node_id=247926
|
|
| -Dusty
|
|
| >>> "Ahmad Masood Shah" <jahil () 66-uetclub com> 8/11/2003 7:58:47 AM
| >>>
| I'm using snort, acid, mysql. it seems to working great. now i want to
| purge
| some logs from snort database. I don't know how I can delete or purge
| database for snort. it seems to be complex due to relationship of
| tables.
| can someone help regarding this.
|
| -- 
|
| Best Regs,
| Masood Ahmad Shah
|
|
|
| -------------------------------------------------------
| This SF.Net email sponsored by: Free pre-built ASP.NET sites including
| Data Reports, E-commerce, Portals, and Forums are available now.
| Download today and enter to win an XBOX or Visual Studio .NET.
|
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
|
| _______________________________________________
| Snort-users mailing list
| Snort-users () lists sourceforge net
| Go to this URL to change user options or unsubscribe:
| https://lists.sourceforge.net/lists/listinfo/snort-users
| Snort-users list archive:
| http://www.geocrawler.com/redir-sf.php3?list=snort-users
|
|
| -------------------------------------------------------
| This SF.Net email sponsored by: Free pre-built ASP.NET sites including
| Data Reports, E-commerce, Portals, and Forums are available now.
| Download today and enter to win an XBOX or Visual Studio .NET.
|
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
| _______________________________________________
| Snort-users mailing list
| Snort-users () lists sourceforge net
| Go to this URL to change user options or unsubscribe:
| https://lists.sourceforge.net/lists/listinfo/snort-users
| Snort-users list archive:
| http://www.geocrawler.com/redir-sf.php3?list=snort-users
|



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users