ACID and archive database

["Jorge Santos" <jorgesantos () valnetsado pt>]

Hi list

I have a working snort 1.8.6 that outputs to a mysql database. To
analyse the alerts i use acid-0.9.6b21. When i try to move alerts, for
the first time in a session, to the archive database, all the alerts are
moved fine. But if i try to move say 500 alerts after i moved the first
ones, the alert database says it moved the 500 alerts, but the archive
database only shows about 100 new ones.

I created the DB's exactly with the same script that comes with snort
distribuition.

What can possibly be wrong?

Thanks in advance

--
   \_/      Jorge Alexandre Santos
   'v'      jorgesantos () valnetsado pt
  // \\     Tel : 212327300
 /(   )\    Fax : 212327301
  ^`~´^     Valnet Sado S.A. 




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users