Re: acid DB error afrer excessive logging

["Dusty Hall" <halljer () auburn edu>]

Micheal,

  Read up on "myisamchk", it will most likely fix your table.  Did the
optimize script do this?


-Dusty


> > > Micheal Reynolds <mreynolds () pc-netservices com> 8/20/2003 1:56:04
PM >>>
Hello All
I am new to this mailing list and pretty new to Snort and have a
question.
.
I installed Snort/Acid as per Patrick Harper's manual which was a
great
help.
I had a sacrificial lamb windows 2000 box sitting on the internet and
have snort running on the ext interface of my firewall.
The mysql was so busy logging the icmp alerts it seems to have messed
up
the database with the following error when I try to login to acid

Database ERROR:Database ERROR:Can't open file: 'event.MYI'. (errno:
145)

The cpu was almost saturated between mysql ~75% and snort ~20%. After
I
got the win2k box patched I got the above error.

Is there any quick way to fix this, perhaps delete the snort DB ?

Many Thanks

Micheal






-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single
machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click
here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net 
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users 
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users