[Snort-devel] Snort with Oracle

David Shettler dshettler at ...2499...
Wed Mar 16 06:53:10 EST 2005


Hey all,

Following the recommendations in this post :
http://sourceforge.net/mailarchive/forum.php?thread_id=6388532&forum_id=7142

I made the modifications to spo_database.c

Which seemed to resolve the "string literal too long" problem, however
it replaced it with the following error:

snort: database: oracle_error: ORA-06502: PL/SQL: numeric or value
error: raw variable length too long ORA-06512: at "SYS.UTL_RAW", line
186

on

snort:         : query: INSERT INTO data (sid,cid,data_payload) VALUES
('1','97223',utl_raw.cast_to_raw('6F72790A6E6F722075736520616E79206772617068696E67206361706162696C697469657320796F75722063616C63756C61746F72206D6179206861766520666F7220637572766520736B65746368696E670A70726F626C656D732E0A0A3C703E0A3C423E46494E414C204558414D205265766965773A3C2F423E202054687572736461792C204465632E203674682C20696E2053574F524453203335392066726F6D20313A3030202D20333A303020706D2E2020506C6561736520636F6D652070726570617265640A77697468207370656369666963207175657374696F6E732066726F6D20746865206368617074657220726576696577732C2070617374206578616D732C20686F6D65776F726B2070726F626C656D732C206574632E0A3C703E0A0A3C623E204C697374206F6620546F706963732042792043686170746572203C2F623E0A0A3C756C3E0A3C6C693E204368617074657220313A202050726563616C63756C75732072657669657720286C617773206F66206578706F6E656E74732C2073696D706C696679696E672065787072657373696F6E732C20666163746F72696E672C20736F6C76696E670A6571756174696F6E73292C2043617

We're using oracle 9.2.0.4 64 bit on Solaris as the DB.

We're researching this on our end for a solution, but if anyone
happens to know the answer, any help would be appreciated.

Thanks

Dave
http://sourceforge.net/projects/oraoink




More information about the Snort-devel mailing list