Snort mailing list archives

acid DB error afrer excessive logging


From: Micheal Reynolds <mreynolds () pc-netservices com>
Date: 20 Aug 2003 19:56:04 +0100

Hello All
I am new to this mailing list and pretty new to Snort and have a
question.
.
I installed Snort/Acid as per Patrick Harper's manual which was a great
help.
I had a sacrificial lamb windows 2000 box sitting on the internet and
have snort running on the ext interface of my firewall.
The mysql was so busy logging the icmp alerts it seems to have messed up
the database with the following error when I try to login to acid

Database ERROR:Database ERROR:Can't open file: 'event.MYI'. (errno: 145)

The cpu was almost saturated between mysql ~75% and snort ~20%. After I
got the win2k box patched I got the above error.

Is there any quick way to fix this, perhaps delete the snort DB ?

Many Thanks

Micheal






-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: