Snort mailing list archives

RE: Re: ACID: Cannot send session cache limiter


From: roman () danyliw com
Date: Thu, 24 May 2001 14:06:41 US/Eastern

I'm using 3.23.38 for Win32, and I just tried pointing to another database
with 3.23.36 on Linux with the same results.  So, the distinguishing factor
is ACID/PHP/GD are running under Windows?

So are you saying that Win32 and Linux MySQL get the same
results?  
 
The error message -- "Database ERROR:You have an error in your SQL syntax
near 'FROM iphdr LEFT JOIN acid_ag_alert ON (iphdr.sid=acid_ag_alert.ag_sid
AND iphdr.' at line 1" -- is that a truncated SQL call?

Go into debug mode and when the error occurs, grab that
SQL and try to run it manually from your MySQL client.  What
happens?
 
What's odd is this same query was working on the identical configuration
just the day before.

Actually, the code commit in question have nothing to do with
acid_graph_*.  I have no idea why it should be affected.
  
I guess you rearranged quite a bit of code in that one
day?

Well, we try to do what we can. ;-)

 
-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of
roman () danyliw com
Sent: Wednesday, May 23, 2001 14:04
To: Frank Reid
Cc: snort-users () lists sourceforge net
Subject: RE: [Snort-users] Re: ACID: Cannot send session cache limiter


Frank,

The latest commit was totally unrelated to the issue you were
experiencing.  I have just gotten around to attempting to
reproduce your error ... I could not.  It seems to me to be
a pure SQL issue; using MySQL 3.23.34 or PostgreSQL 7.1
I got no errors? What versions are you using?

Roman

Still getting this error in the charting routines:

Chart Type:   Dst. IP address vs. Number of Alerts

--------------------------------------------------------------------------
--
---
Database ERROR:You have an error in your SQL syntax near 'FROM iphdr LEFT
JOIN acid_ag_alert ON (iphdr.sid=acid_ag_alert.ag_sid AND iphdr.' at line
1

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of
roman () danyliw com
Sent: Wednesday, May 23, 2001 12:44
To: dmuz
Cc: snort-users () lists sourceforge net
Subject: [Snort-users] Re: ACID: Cannot send session cache limiter


Fixed, and commited to CVS.

Roman

hello,

I am getting the following error when running yesterdays CVS version of
ACID.

Warning: Cannot send session cache limiter - headers already sent
(output started at /var/www/htdocs/acid/acid/acid_action.inc:321) in
/var/www/htdocs/acid/acid/acid_common.php on line 116

This error apears at the top of any page that is listing alert reports.

I'm running Snort 1.8-beta5 (Build 24), PHP/4.0.5 and ACID 0.9.6b10 CVS
from 5.22.01.

Note that I also recreated the acid_ag, acid_ag_alert and acid_ip_cache
from the latest included create_acid_tbls_mysql.sql script.

cheers...
--
dmuz
http://sec.angrypacket.com/





---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users






---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users






---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: