Re: ACID error

[Pär Thoren <par.thoren () consultant saab se>]

Hi!

Old version of Acid was the problem. 
I installed it from a newly cvsuped ports dir (freebsd)
but it was pretty old anyway. 
I upgraded to the latest Acid version and everything worked fine.

roman () danyliw com wrote:
> Some more details please:
>
> - What version of ACID?
> - What Snort database schema?
>
> Also, using Snort DB v103 (i.e. Snort 1.8) with
> ACID 0.9.6b11 has known issues.  Upgrade at least
> to v0.9.6b12.
>
> cheers,
> Roman
>
> > Hi!
> >
> > When I use ACID for monitoring my IDS I get errors (I guess they are sql
> > errors) from the pages.
> > The errors only accours when the php pages tries to get ip adresses from
> > the database.
> >
> > For example when watching "Unique Source Address(es)"  I get this error:
> >
> > ---
> > 0 IP addresses were found
> >
> >
> > Warning: Supplied argument is not a valid MySQL result resource in
> > /usr/local/share/doc/apache/acid/acid_stat_uaddr.php on line 169
> >
> > Warning: Supplied argument is not a valid MySQL result resource in
> > /usr/local/share/doc/apache/acid/acid_stat_uaddr.php on line 221
> > ---
> >
> > Or "Alert Search Results" I get this error:
> >
> > ---
> >
> > Query execution error: Unknown column 'ip_src0' in 'field list'
> >
> > ---
> >
> > When looking at the database there is only a ip_src column, not ip_src0,
> > ip_src1, ip_src2
> > as the query is looking for in the php code.
> >
> > /Pär
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> ---------------------------------------------
> This message was sent using Voicenet WebMail.
>       http://www.voicenet.com/webmail/
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users