Snort mailing list archives
Re: Many Events in new SNORT box
From: Alexander Zenger <azen () izb net>
Date: Thu, 12 Aug 2004 07:39:59 +0200
Hello, if you're sure that you don't need any of the sniffed datas from the db, than you can drop the hole snort database. Therefor go on the mysql commandline of your db and type "drop database snort;". But be really sure what you are doing. This will delete all datas logged. Regards, Alexander Zenger On Wed, Aug 11, 2004 at 10:24:35PM -0400, Postiglione, Jon wrote:
Hello, I just recently configure and new snort box and before I could setup the events that I wanted to keep and the ones I wanted to delete I had over 5 million events (We run a really chatty network). Well, anyway I need to delete all of the events in SNORT but it will not let me because there are too many off them (it times out). I do not know much about MySQL or SNORT, is there an easy way to delete all of the events (besides rebuilding the box)? Thanks from a NewBie! Regards, Jon Postiglione This email and any files transmitted with it may contain PRIVILEGED or CONFIDENTIAL information and may be read or used only by the intended recipient. If you are not the intended recipient of the email or any of its attachments, please be advised that you have received this email in error and that any use, dissemination, distribution, forwarding, printing, or copying of this email or any attached files is strictly prohibited. If you have received this email in error, please immediately purge it and all attachments and notify the sender by reply email or contact the sender at the number listed.
-- Internet Services OE 564 IZB Informatik-Zentrum München-Frankfurt a.M. Gmbh & Co. KG einsteinring 17 85609 Aschheim www.izb.net Tel./Fon. 089/94511-8318 Fax. 089/94511-8941 azen () izb net ------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Many Events in new SNORT box Postiglione, Jon (Aug 11)
- Re: Many Events in new SNORT box Alexander Zenger (Aug 11)
- Re: Many Events in new SNORT box sekure (Aug 12)
- <Possible follow-ups>
- RE: Many Events in new SNORT box Joshua Berry (Aug 12)