RE: Snort database relationship info?

["Smith, Israel G" <ISmith () FIRMLOGIC NET>]

My assumption with ACID is that the data in the acid_event table is merely
data pulled from the Snort tables.

Am I wrong?
Is ACID massaging the data somehow?

I'm getting event.signature that have no corresponding signature.sig_id 

and 

signature.sig_class_id with no corresponding sig_class_id.

Is

-----Original Message-----
From: Chris Reid [mailto:chris.reid () codecraftconsultants com]
Sent: Thursday, April 11, 2002 4:07 PM
To: Smith, Israel G; snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort database relationship info?



Try taking a look at the ERD available on the ACID website:

    http://www.cert.org/kb/acid/

    http://www.andrew.cmu.edu/~rdanyliw/snort/acid_db_er_v102.html

Chris Reid


----- Original Message -----
From: "Smith, Israel G" <ISmith () FIRMLOGIC NET>
To: <snort-users () lists sourceforge net>
Sent: Thursday, April 11, 2002 1:04 PM
Subject: [Snort-users] Snort database relationship info?


> I need a detailed snort database relationship description.
>
> I'm importing data from PostgreSQL to MSSQL and it appears that I've got
> something wrong with the tables relationships, but the basic Snort db
schema
> is not detailed enough.
>
> Does anyone know where I can get this information?
>
> Is
>
> Because e-mail can be altered electronically, the integrity of this
> communication cannot be guaranteed.
>
> Israel Smith
> Programmer
> ismith () firmlogic net
> *******************************************
> Bagpipes, putting the fun back in funeral.
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users