RE: How to delete alerts without acid

["Schmehl, Paul L" <pauls () utdallas edu>]

> -----Original Message-----
> From: snort-users-admin () lists sourceforge net 
> [mailto:snort-users-admin () lists sourceforge net] On Behalf Of 
> Jason Humes
> Sent: Monday, March 15, 2004 2:44 PM
> To: 'SN ORT'; 'snort-users () lists sourceforge net'
> Subject: RE: [Snort-users] How to delete alerts without acid
>
> Sorry, my snort DB is mysql and its hosted on the notebook.  
> How would I clear this out manually?  Thanks

Unless you know sql query language very well, I would suggest not doing
this.  You don't want to remove one table's entries without removing the
associated entries in other tables or you'll end up with a jumbled mess.

May I suggest using my perl script to do this in a logical, organized
manner?  I'm attaching the config file and script so they will be
archived.  Some day I'll get the docs done and put it on my website.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/

Attachment: acidPlus.config
Description: acidPlus.config

Attachment: archivePlus.pl
Description: archivePlus.pl