Snort mailing list archives

Re: snort 1.7/ACID logging to MYSQL, but no signatures showing


From: "Keith & Rachel Murphy" <rae.murphy () verizon net>
Date: Sun, 19 Aug 2001 15:01:45 -0700

Thanks for the help.  Haven't decided what I will do yet,  but its great to
know I didn't do something stupid!!

Keith
----- Original Message -----
From: <roman () danyliw com>
To: "Keith & Rachel Murphy" <rae.murphy () verizon net>
Cc: <snort-users () lists sourceforge net>
Sent: Sunday, August 19, 2001 8:54 AM
Subject: Re: [Snort-users] snort 1.7/ACID logging to MYSQL, but no
signatures showing


ACID 0.9.6b13 has a known bug when interacting with v0 (Snort
1.7) databases.  This bug causes the signature to display
incorrectly.  You have several mitigation strategies:

- "Downgrade" ACID to v0.9.6b12
- "Upgrade" to the CVS version.  If you decide to use the CVS version
first delete the acid_event table from the database (e.g. DROP TABLE
acid_event)

Roman


On Fri, 17 Aug 2001, Keith & Rachel Murphy wrote:

I am kind of new to snort.  I had no problems installing it on a Debian
based server
(that is why it is running 1.7 in$>
Thanks,

Keith




---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: