Re: Oracle as database

[Jed Pickel <jed () pickel net>]

Hey Andrew,

Glad so see someone using Oracle. I don't have an Oracle server set up
so the create_oracle schema and code is not at all debugged.

On Wed, Aug 08, 2001 at 07:02:17PM +0100, Andrew Stubbs wrote:
> I get the following when trying to use oracle (after fixing a few syntax errors in the script) as the database:

Could you send me the create_oracle syntax errors -- I'll commit the
fixes to CVS.

> Aug  8 18:48:39 desdemona snort: database: oracle_error: Error while trying to retrieve text for error ORA-01403  
> Aug  8 18:48:39 desdemona snort: database: oracle_error: Error while trying to retrieve text for error ORA-01405  
> Aug  8 18:48:39 desdemona snort: Snort initialization completed successfully, Snort running
> Aug  8 18:48:39 desdemona snort: database: oracle_error: Error while trying to retrieve text for error ORA-01403  
> Aug  8 18:48:39 desdemona last message repeated 2 times
> Aug  8 18:48:39 desdemona snort: database: oracle_error: ORA-00911: invalid character   << this is probably the true 
> error
> Aug  8 18:48:39 desdemona last message repeated 2 times
> Aug  8 18:48:39 desdemona snort: FATAL ERROR: database: Unable to insert the alert reference into the DB 

First off, which version of snort are you using? The current
development version http://snort.sourceforge.net/snort-daily.tar.gz
fixes this FATAL ERROR on inserting references. 

But I don't believe this will fix the other errors you are seeing. If
you have time, try snaging the latest devel version and compiling
snort after uncommenting the debug define at the beginning of
spo_database.c.

  "/* #DEFINE DEBUG */" => "#DEFINE DEBUG"

Then when you run snort, you will see on STDOUT all of the queries
going to the database, or details of any other operation with the
database... 

If you can send me those debugs that should be enough to fix the
errors your seeing.

Regards,

* Jed

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users