Snort mailing list archives
Re: ACID Archiving on Postgresql
From: roman () danyliw com
Date: Fri, 7 Sep 2001 13:59:25 US/Eastern
A fix implementing a combination of option 1 and 2 suggested below has been committed to CVS. Roman. On Fri, 7 Sep 2001, leE wrote:
On Thu, Sep 06, 2001 at 01:13:51PM -0400, Fraser Hugh wrote:It appears that the pre-processors do not include a sig_class_id or sig_priority. If specified in the insert statement, they're required to be int8 values, but they're not required fields. However, the archive code explicitly copies these values over, and postgres balks because the fields aren't int8. There's a few solutions, probably in order of preference, but I'm not one for the developers and don't understand the implications. 1. Change the archiving code to exclude NULL fields. 2. Change the plugins to include a non-NULL value for these fields. 3. Add a trigger to the signature table to force a value for the fields. Not having the time to dig through the code, this was my quick solution.I've attached a patch for acid_common.inc - it lacks any kind of grace or finesse, but it does sort the problem out ;) Lee
--------------------------------------------- This message was sent using Voicenet WebMail. http://www.voicenet.com/webmail/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: ACID Archiving on Postgresql Fraser Hugh (Sep 06)
- Re: ACID Archiving on Postgresql leE (Sep 06)
- <Possible follow-ups>
- Re: ACID Archiving on Postgresql roman (Sep 07)