Re: Deleting data from Snort DB

[sekure <sekure () gmail com>]

IIRC, you'd have to delete data from event, data, iphdr, and depending
on whether the packet is TCP, UDP, or ICMP, tcphdr, udphdr, and
icmphdr.  As far as ACID goes, I am not sure, but it's likely you'll
need to clean those tables as well...


----- Original Message -----
From: Jeff Heckart <jheckart () mycom com>
Date: Tue, 27 Jul 2004 07:37:29 -0400
Subject: [Snort-users] Deleting data from Snort DB
To: snort-users () lists sourceforge net




Hello,

 

I am trying to rid old data from my snort/acid MySQL database.  I have
looked around and the only method that I have found is by way of the
ACID interface.  I would like to delete based on time through the
MySQL client.  Is there a script around that does this, or what tables
would I need to delete data from based on time?

 

Thanks.


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users