Snort mailing list archives

RE: [snort-users] Re: ACID: Cannot send session cache limiter


From: rdanyliw () voicenet com
Date: Thu, 24 May 2001 15:32:37 US/Eastern

 Ooops ... I was testing the wrong chart type.  I just commited a 
 modification in the SQL to CVS; update acid_graph_main.php
 
 cheers,
 Roman
 
Roman,

I'm using 3.23.38 for Win32, and I just tried pointing to another database
with 3.23.36 on Linux with the same results.  So, the distinguishing factor
is ACID/PHP/GD are running under Windows?

The error message -- "Database ERROR:You have an error in your SQL syntax
near 'FROM iphdr LEFT JOIN acid_ag_alert ON (iphdr.sid=acid_ag_alert.ag_sid
AND iphdr.' at line 1" -- is that a truncated SQL call?

What's odd is this same query was working on the identical configuration
just the day before.  I guess you rearranged quite a bit of code in that one
day?

Frank

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of
roman () danyliw com
Sent: Wednesday, May 23, 2001 14:04
To: Frank Reid
Cc: snort-users () lists sourceforge net
Subject: RE: [Snort-users] Re: ACID: Cannot send session cache limiter


Frank,

The latest commit was totally unrelated to the issue you were
experiencing.  I have just gotten around to attempting to
reproduce your error ... I could not.  It seems to me to be
a pure SQL issue; using MySQL 3.23.34 or PostgreSQL 7.1
I got no errors? What versions are you using?

Roman

Still getting this error in the charting routines:

Chart Type:   Dst. IP address vs. Number of Alerts

--------------------------------------------------------------------------
--
---
Database ERROR:You have an error in your SQL syntax near 'FROM iphdr LEFT
JOIN acid_ag_alert ON (iphdr.sid=acid_ag_alert.ag_sid AND iphdr.' at line
1

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of
roman () danyliw com
Sent: Wednesday, May 23, 2001 12:44
To: dmuz
Cc: snort-users () lists sourceforge net
Subject: [Snort-users] Re: ACID: Cannot send session cache limiter


Fixed, and commited to CVS.

Roman

hello,

I am getting the following error when running yesterdays CVS version of
ACID.

Warning: Cannot send session cache limiter - headers already sent
(output started at /var/www/htdocs/acid/acid/acid_action.inc:321) in
/var/www/htdocs/acid/acid/acid_common.php on line 116

This error apears at the top of any page that is listing alert reports.

I'm running Snort 1.8-beta5 (Build 24), PHP/4.0.5 and ACID 0.9.6b10 CVS
from 5.22.01.

Note that I also recreated the acid_ag, acid_ag_alert and acid_ip_cache
from the latest included create_acid_tbls_mysql.sql script.

cheers...
--
dmuz
http://sec.angrypacket.com/





---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users






---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users






---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/






---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: