Snort mailing list archives

questions for snort database (contine)


From: Henry Chan <henrchan () aslhk56 asl com hk>
Date: Wed, 24 Oct 2001 16:27:28 +0800

Thanks Sandro and all snort users:

Pls help I still have the error for my database after I update the 
adodb to 1.4 and acid to 0.9.6b16.tar and do the (postgresql)database 
field changes. 

After I do all the things above, the snort running for around 2 hours. 
The snort came out the error "segmentation fault (core dump)" and  the 
database came out the error "pq_recvbuf:unexpected EOF on client 
connection". Then the snort hang. Pls help for all the snort's 
specialist. 
--- Begin Message --- From: <sandro.poppi () wacker com>
Date: Tue, 23 Oct 2001 10:16:00 +0200

Hi Henry,

well I'm using MySQL so the following would look maybe different for postgeSQL:

I also updated the database schema from v1.03 to 1.04 with the following
commands (I've done it with a running db with no probs):

mysql> DELETE FROM schema WHERE vseq = 103;
mysql> INSERT INTO schema (vseq, ctime) VALUES (104, now());
mysql> ALTER TABLE reference MODIFY ref_tag VARCHAR(100) NOT NULL;

HTH,
Sandro

-----Ursprüngliche Nachricht-----
Von: Henry Chan <henrchan () aslhk56 asl com hk> at internet
Gesendet: Dienstag, 23. Oktober 2001 15:58
An: Poppi, Sandro
Cc: <snort-users () lists sourceforge net> at Internet
Betreff: [Snort-users] Re: AW: (Snort-users) Fwd: questions for the A


Dear all:

After I update the adodb to adodb1.4 and acid to acid_0.96b16. The
first hour is very smooth. After that, I see the database
say "pq_recvbuf:unexpected EOF on client connection". Then my snort
doesn't have any reaction. After I restart the snort, the snort
continues to have alert. Is there any problems for my
database or what.
Because right now, my database is using postgresql 7.0.3-8. Do I need
to update the database also. Thanks....


----- Original Message -----
From: <sandro.poppi () wacker com>
Date: Friday, October 19, 2001 4:31 pm
Subject: AW: (Snort-users) Fwd: questions for the ACID Details


I didn't have the same prob but I suggest updating acid and adodb
to the latest
versions. Especially for the latest adodb it is reported to have
much better
performance than previous versions.

You also might have a look on the output of the top command when
your browser
hangs. I figuered out that sometimes acid creates huge memory uses
with httpd
resulting in swapping on my system (PIII 700/256MB with 5 NICS
snorting).Using a central mysqthat.

HTH,
Sandro

-----Urspr3ngliche Nachricht-----
Von: Henry Chan <henrchan () aslhk56 asl com hk> at internet
Gesendet: Freitag, 19. Oktober 2001 16:10
An: snort-users () lists sourceforge net at Internet
Betreff: [Snort-users] Fwd: questions for the ACID Details


Thanks the guy answer me the questions and the following is
my details
of my ACID:Pls help me to solve the problem.

Repeat my problem : my browser is hang after a couple of
hours. After I
restart the database, snort, and browser(the browser is
netscape it
come with installation of linux 7.1). It works fine after
restart and
after a couple of hours the browser is hang.

My computer:PIII 1G 512M Ram with 20G SCSI HD
Platform: linux 7.1 (server installation)
snort 1.8p1
swatch 3.0.2
postgresql 7.0.3-8
acid_0.9.6b13.tar
adobd 1.31
php 4.06
perl 5.060-12
gd 1.8.37
apache-1.3.19-5
phplot4.4.6





_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list ort-users




--- End Message ---

Current thread: