RE: ACID and archive database

["Slighter, Tim" <tslighter () itc nrcs usda gov>]

I have been running into similar problems.  When moving/archiving or even if
I am deleting, the first screen moves over just fine, but the second time
around they do not.   The "ODD" workaround I have been compelled to resort
to is after an archive/move/delete or whatever else it may be, I then click
on "HOME" to go back to the start page of ACID and then go back in and
move/archive another batch.  This seems to work but might not be the answer
most people are looking for.  Sure that someone is going to see this and
have a more substantial and acceptable answer

-----Original Message-----
From: Jorge Santos [mailto:jorgesantos () valnetsado pt]
Sent: Wednesday, July 17, 2002 3:22 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] ACID and archive database


Hi list

I have a working snort 1.8.6 that outputs to a mysql database. To
analyse the alerts i use acid-0.9.6b21. When i try to move alerts, for
the first time in a session, to the archive database, all the alerts are
moved fine. But if i try to move say 500 alerts after i moved the first
ones, the alert database says it moved the 500 alerts, but the archive
database only shows about 100 new ones.

I created the DB's exactly with the same script that comes with snort
distribuition.

What can possibly be wrong?

Thanks in advance

--
   \_/      Jorge Alexandre Santos
   'v'      jorgesantos () valnetsado pt
  // \\     Tel : 212327300
 /(   )\    Fax : 212327301
  ^`~´^     Valnet Sado S.A. 




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users