Snort mailing list archives

RE: FW: [ACID Newcomer] snort.signature table not a


From: Bruce Platt <Bruce () ei3corp com>
Date: Fri, 25 May 2001 16:31:04 -0400

Roman, Marc, and others,

The following worked: $DBlib_path="/home/www/adodb";

Apparently, the path name needs to be included without the trailing
"/adodb/adodb.inc.php" .

Now, I see the new version of acid has these cool graphs!

Thanks!



-----Original Message-----
From: roman () danyliw com [mailto:roman () danyliw com]
Sent: Friday, May 25, 2001 9:50 AM
To: Bruce Platt
Cc: snort-users () lists sourceforge net
Subject: RE: FW: [Snort-users] [ACID Newcomer] snort.signature table not
a


Bruce,

$DBlib_path = "";

This configuration should only work if you have installed the
ADODB library files in the same directory as the ACID files.

Try setting the $DBlib_path variable to the be the full
path to ADODB:

e.g. $DBlib_path="/home/www/adodb/adodb.inc.php"

- Roman


Based upon suggestions from the list, I downloaded the latest version from
cert.org, acid-0.9.6b9.

I saved a copy of acid_conf.php before I untarred the newer version into
my
/home/www/acid tree, and edited in 
my values of    $alert_dbname, $alert_host, $alert_port, $alert_user, and
$alert_password.

When then pointing my browser to the acid console page, I receive the
following error:

"Error loading the DB Abstraction library: from "/adodb.inc.php"

Check the DB abstraction library variable $DBlib_path in acid_conf.php"

I beleive that this value has always been:

$DBlib_path = "";

And the console worked before I made the change.

It appears I have done something VERY stupid, but I cannot figure out
what.

Any help is appreciated.  Thanks!


-----Original Message-----
From: roman () danyliw com [mailto:roman () danyliw com]
Sent: Thursday, May 24, 2001 12:22 PM
To: Bruce Platt; 'snort-users () lists sourceforge net'
Cc: marc.thompson () bops com
Subject: Re: FW: [Snort-users] [ACID Newcomer] snort.signature table not
avail


What version of ACID?  You mention 0.9.6b[?]

I was just about to send a note asking the same question.  Perhaps a
post
to
the list would be worthwhile to others as well.

Thanks and regards,

Bruce

-----Original Message-----
From: Marc Thompson [mailto:Marc.Thompson () bops com]
Sent: Thursday, May 24, 2001 3:04 PM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] [ACID Newcomer] snort.signature table not
available error


Greetings,

[RedHat 7.1]        [ACID 0.9.6]    [ADODB 1.11] 
[Snort 1.7]         [MySQL 3.23.26]         [Apache 1.3.17]

I have successfully installed Snort-PHP-Acid and everything 
works with one exception:

    Database ERROR:Table 'snort.signature' doesn't exist

Otherwise, all is well and I can see all the event data.  
I'm assuming that there is a SQL file somewhere out there
that will create the table.

Please direct any responses to my email address:

    marc.thompson () bops com

because I don't currently subscribe to your mailing list.

Best Regards,
Marc Thompson

*******************************************
Marc Thompson
IT Site Manager
BOPS, Inc.
7800 Shoal Creek Blvd. Suite 200N
Austin, TX 78757
Direct: (512)407-1103
Fax:  (512)346-8407

This message is for the sole use of the intended recipient(s) and may
contain
confidential and privileged information.  Any unauthorized review, use,
disclosure, or distribution is prohibited.  If you are not the intended
recipient, 
please contact the sender and destroy all copies of the original
message.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: