RE: snort e oracle

["Kreimendahl, Chad J" <Chad.Kreimendahl () umb com>]

This was caused by the BEGIN statement that was added just prior to the
version you're using.   The most recent version of spo_database.c for
1.9.x will do what you want.

Near line 1552: Look for this:

Insert("BEGIN", data);

Change to this:

#ifndef ENABLE_ORACLE
 /* No need for begin in Oracle...            */
Insert("BEGIN", data);
#endif

The patch was applied to the 2.x tree of snort, but apparently not
1.9.x.  

-----Original Message-----
From: Master Brian [mailto:mangabbs () hotmail com] 
Sent: Thursday, March 20, 2003 8:14 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] snort e oracle


I've finally fixed (with help of the DBA for oracle) my snort
distribution to work with oracle. I've compiled it with oracle support
(thx to oci libraries). I've patched the spo_database.c files (that I've
found over internet was bugged for use with oracle). But I've the same
problem that was adviced with version 1.9.0:

Having problems with logging to oracle, when spo_database attempts to
insert into OPT table, the following occurs:

database: oracle_error: ORA-06550: line 1, column 5:
PLS-00103: Encountered the symbol "end-of-file" when expecting one of
the following:

   begin case declare exit for goto if loop mod null pragma
   raise return select update while with <an identifier>
   <a double-quoted delimited-identifier> <a bind variable> <<
   close current delete fetch lock insert open rollback
   savepoint set sql execute commit forall merge
   <a single-quoted SQL string> pipe

I'm running snort 1.9.1. on redhat 8.0 with mysql all work good, but
with oracle I'm having so many problem, can someone help me? I've to
wait until next version?

Thank you.


-------------------------------------------------------
This SF.net email is sponsored by: Tablet PC.
Does your code think in ink? You could win a Tablet PC.
Get a free Tablet PC hat just for playing. What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users