Snort mailing list archives
why is gid missing from the db schema ?
From: Yarden Livnat <yarden () mac com>
Date: Tue, 23 Nov 2004 20:36:49 -0700
I noticed that in the 'signature' table of the database schema only the sid and rev field are set from the snort event but the gid (generator id) is ignored and thus can not be recovered from the database.
why is this ? is there another way of recovering the gid ?I'm writing a visualization system that uses the data from the database but the missing 'gid' is a real headache.
thanks, Yardenp.s. I check the 'C' code and sure enough it ignore the sig_generator from the event field.
------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users.Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- why is gid missing from the db schema ? Yarden Livnat (Nov 23)