Re: Snort Archive

[Steve Suehring <snort () braingia org>]

Hello,

Can you send the SQL statements and/or the portions of the perl script 
that you believe are failing?  Also, how big is the database?

Steve

On Wed, Nov 06, 2002 at 12:29:45PM -0500, Brett.Gillett () tsx ca wrote:
> Hi everyone,
>
> I have a question about archiving snort data.  Currently, we have our
> sensors logging
> to a local MySql database - what I would like to do is move the data to an
> archive database
> and reduce the number of fields stored.  Has anyone done this before?  I
> have created
> some perl scripts to select data from each day and dump it into an archive
> database, but
> it seems to be failing, and only selecting a subset of the data.  I am not
> sure if it's the
> SQL query itself or the fact that the snort DB is already so huge.
>
> Has anyone done something similar?  If so, some pointers would be
> appreciated.
>
> Thanks,
>
> Brett
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: See the NEW Palm 
> Tungsten T handheld. Power & Color in a compact size!
> http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users