Re: Where is "snortdb-extra"?

[Chris Mills <securinate () gmail com>]

snortdb-extra.gz's removal is described here:
http://cvs.snort.org/viewcvs.cgi/snort/contrib/Attic/snortdb-extra.gz

I found that I didn't need snortdb-extra.gz to make acid display the
data, but I did need to import the create_mysql file into the DB. Acid
uses that, not the snortdb-extra files to show the sig descriptions.

Chris


On Tue, 01 Feb 2005 16:50:45 +0100, Heinrich Lieker <hlieker () dohle com> wrote:
> Well, the way I configured and used my Snort/Acid I needed the extra
> tables.
> In the schema-script "create_postgresql" I found this entry:
>
> -- be sure to also use the snortdb-extra tables if you want
> -- mappings for tcp flags, protocols, and ports
>
> Without the extra tables Acid showed just signature IDs and no
> description.
>
> Am Di, den 01.02.2005 schrieb Miner, Jonathan W (CSC) (US SSA) um 16:40:
> > I raised this same question several weeks (?) ago.  It doesn't appear clear to me if anyone even knows why the the 
> > extra databases are needed, and if so, who uses them.  I did a quick check through the ACID source code, and did 
> > not see references to them.
> >
> >
> > -----Original Message-----
> > From: snort-users-admin () lists sourceforge net on behalf of Heinrich Lieker
> > Sent: Tue 02/01/2005 10:31 AM
> > To:   VAUGHAN MOSELEY
> > Cc:   snort-users () lists sourceforge net
> > Subject:      Re: [Snort-users] Where is "snortdb-extra"?
> > Hi!
> >
> > Thanks.
> >
> >
> > I checked an old version from snort (ver.2.1.0). In this tar.gz one can
> > find the "snortdb-extra.gz" and other files under the directory
> > "contrib".
> > In 2.3.0 they obviously changed the structure and forgot files like the
> > "snortdb-extra.gz". Is this known or even intended?
> >
> > regards
> > Heinrich
> >
> >
> > Am Di, den 01.02.2005 schrieb VAUGHAN MOSELEY um 16:21:
> > > Hi Heinrich,
> > >
> > > Igot mine from cvs.snort.org site.
> > >
> > > do
> > >
> > > wget http://cvs.snort.org/viewcvs.cgi/snort/contrib/Attic/snortdb-extra.gz
> > >
> > > vaughan
> > >
> > >
> > >
> > >
> > > On Tue, 01 Feb 2005 15:52:42 +0100, Heinrich Lieker <hlieker () dohle com> wrote:
> > > > Hello!
> > > >
> > > > I just wanted to install the new 2.3.0 release. After finishing my
> > > > configure, make und make install procedure, I wanted to create my
> > > > database tables when I realised that I don't have the
> > > > "snortdb-extra.gz".
> > > >
> > > > Can anyone tell me, where it is?
> > > >
> > > > Thanks
> > > > Heinrich
> > > >
> > > > -------------------------------------------------------
> > > > This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
> > > > Tool for open source databases. Create drag-&-drop reports. Save time
> > > > by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
> > > > Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> > > > _______________________________________________
> > > > Snort-users mailing list
> > > > Snort-users () lists sourceforge net
> > > > Go to this URL to change user options or unsubscribe:
> > > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > > Snort-users list archive:
> > > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >
> > -------------------------------------------------------
> > This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
> > Tool for open source databases. Create drag-&-drop reports. Save time
> > by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
> > Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
> Tool for open source databases. Create drag-&-drop reports. Save time
> by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
> Download a FREE copy at http://www.intelliview.com/go/osdn_nl
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users