Snort mailing list archives

RE: Graph alert data problem


From: roman () danyliw com
Date: Mon, 12 Nov 2001 10:16:32 US/Eastern

Dan,

Phil's directions are exactly correct.  Perhaps it is not related to how  
you are attempted to graph the data. Have you confirmed that the
underlying graphing facilities have been configured correctly?  See ACID
FAQ Question #B-8 (http://acidlab.sourceforge.net/acid_faq.html).

Roman

On Sun, 11 Nov 2001, Dan McIntosh wrote:

I just updated to the latest build - I still can't get it to generate a   
graph!  With the latest version, if I don't select an Alert group, it says
it will use the entire data set.  I don't get any errors -- or graph.  On
Netscape and IE there is a graphic icon in the place of the graph.


-----Original Message-----
From: Phil Wood [mailto:cpw () lanl gov]
Sent: 11 November 2001 9:40 PM
To: Dan McIntosh
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] Graph alert data problem


On Sun, Nov 11, 2001 at 03:35:46PM -0500, Dan McIntosh wrote:
I added an Alert Group and populated it with alerts (80).  I still can't
seem to get a graph to be generated.

Go to AG Maintenance and verify that you have "80" alerts in the data
source.
Go to Graph Alert DAta

Select a chart type (try time(hour) vs Number of alerts)
Select Chart Period 7 (aweek)
Select Graph type line
Select Data source (what ever your data source is (mine was [1] icmp
packets)
Punch Graph Alerts


Anyone?


 ..Dan

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Dan
McIntosh
Sent: 11 November 2001 3:06 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Graph alert data problem


I am trying to get "Graph Alert data" working on ACID.  No matter what
date
range I select, I get the message "No AG was selected for the data
source.".
There is nothing in the Data Source drop-down list, other than "{ data
source (AG) }".  The PHPlot test page displays a graph, indicating it is
installed correctly.

Ideas??


 ..Thanks, Dan




---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: