Re: base/acid error on loading new alerts/logs

[Chris McClimans <snort-users () mcclimans net>]

I've also noted that there was a discussion on this that I tried the  
proposed solution, but without any luck:

http://groups.google.com/groups? 
hl=en&lr=&c2coff=1&safe=off&threadm=cllpht%2419kn%241%40FreeBSD.csie.NCT 
U.edu.tw&rnum=4&prev=/ 
groups%3Fq%3DStealth%2BActivity%26hl%3Den%26lr%3D%26group%3Dmailing.unix 
.snort%26c2coff%3D1%26safe%3Doff%26scoring%3Dd%26selm%3Dcllpht%252419kn% 
25241%2540FreeBSD.csie.NCTU.edu.tw%26rnum%3D4

While I don't get duplicate entries anymore, all "spp_stream4: Stealth  
Activity Detected" signatures have a url of:
http://www.snort.org/snort-db/sid.html?sid=1

The correct generator/sid is supposed to be 111 right?
-chris

On Dec 1, 2004, at 9:07 AM, Chris McClimans wrote:

> I started out with acid and after new alerts are loaded into the  
> database I often get the following error in the web browser. I  
> upgraded to the current base, but still no luck getting rid of the  
> error. I'm using snort+>barnyard+>mysql.
>
> Database ERROR:Database ERROR:Duplicate entry '1-7622' for key 1
>
> After I reload (and before any new alerts hit) the pages load just  
> fine.... is there any reason I might be getting duplicate entries?
> -chris



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users