Snort mailing list archives

Re: Fw: DATETIME Data Type? Snort & Acid Intrusion Dectection Packages broken with 7.3.2 Release]


From: "Jason" <snort-users () tcpipbitch net>
Date: Wed, 16 Apr 2003 15:07:03 -0400 (EDT)

Edit the create_postgresql file, and change DATETIME to TIMESTAMP (I think
there are 4 places to edit it), also if your using acid, grep for DATETIME
through the acid files and change those too.  That worked for me, however
I still have the issue of not being able to archive using postgresql and
acid, but thats another issue


From: David Benham [mailto:dcb () vcomcon com]
Sent: Wednesday, April 16, 2003 1:12 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Fw: DATETIME Data Type? Snort & Acid Intrusion
Dectection Packages broken with 7.3.2 Release


Create_postgresql contrib script fails with Postgresql 7.3.2 - see below.

----- Original Message -----
From: dcb () vcomcon com <mailto:dcb () vcomcon com>
To: pgsql-general () postgresql org <mailto:pgsql-general () postgresql org>  
Sent: Wednesday, April 16, 2003 10:02 AM
Subject: DATETIME Data Type? Snort & Acid Intrusion Dectection Packages
broken with 7.3.2 Release

I've been using Postgresql 7.2, Snort, & Acid as our intrusion detection
package.  Recently, I attempted upgrade to Postgresql 7.3.2.  The database
schema generation scripts provided with both Snort & Acid include a
"DATETIME" data type.   These same scripts worked with earlier versions
Postgresql, but fail with 7.3.2.

I can find no evidence that Postgresql ever supported a DATETIME data
type..... yet the schema scripts executed without error in earlier
releases. The scripts do not use "CREATE TYPE" to create a DATETIME data
type.  I see no evidence it's been dropped in looking at the build/release
history.

Anybody have any idea what's going on here?  Has support for a "DATETIME"
data type been dropped?  Current Snort & Acid schema require a DATETIME
data type, and reference it in the database generation scripts.  So, both
those products now fail with Postgresql.


Current thread: