Snort mailing list archives

RE: SQL command to clear out the snort database


From: "Botwick, Jason (Genworth, Contractor)" <Jason.Botwick () genworth com>
Date: Fri, 15 Oct 2004 17:14:12 -0400

I use this:

DELETE FROM data;
DELETE FROM event;
DELETE FROM icmphdr;
DELETE FROM iphdr;
DELETE FROM opt;
DELETE FROM tcphdr;
DELETE FROM udphdr;
DELETE FROM signature;
DELETE FROM sig_class;
DELETE FROM sig_reference;
DELETE FROM reference;
DELETE FROM reference_system;
DELETE FROM acid_event;
DELETE FROM acid_ip_cache;

I forget where I got that, probably Patrick Harper.

-----Original Message-----
From: Pat Delaney [mailto:Pat.Delaney () inewsroom com]
Sent: Friday, October 15, 2004 4:15 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] SQL command to clear out the snort database


The database on my snort server is huge, I'm looking for an SQL command
to clear it out, rather than using the webpage ACID front end.

Any thoughts?

Pat


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: