[snort-users] Re: ACID: Cannot send session cache limiter

rdanyliw at ...1925... rdanyliw at ...1925...
Thu May 24 15:32:37 EDT 2001


 Ooops ... I was testing the wrong chart type.  I just commited a 
 modification in the SQL to CVS; update acid_graph_main.php
 
 cheers,
 Roman
 
> > Roman,
> > 
> > I'm using 3.23.38 for Win32, and I just tried pointing to another database
> > with 3.23.36 on Linux with the same results.  So, the distinguishing factor
> > is ACID/PHP/GD are running under Windows?
> > 
> > The error message -- "Database ERROR:You have an error in your SQL syntax
> > near 'FROM iphdr LEFT JOIN acid_ag_alert ON (iphdr.sid=acid_ag_alert.ag_sid
> > AND iphdr.' at line 1" -- is that a truncated SQL call?
> > 
> > What's odd is this same query was working on the identical configuration
> > just the day before.  I guess you rearranged quite a bit of code in that one
> > day?
> > 
> > Frank
> > 
> > -----Original Message-----
> > From: snort-users-admin at lists.sourceforge.net
> > [mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of
> > roman at ...438...
> > Sent: Wednesday, May 23, 2001 14:04
> > To: Frank Reid
> > Cc: snort-users at lists.sourceforge.net
> > Subject: RE: [Snort-users] Re: ACID: Cannot send session cache limiter
> > 
> > 
> > Frank,
> > 
> > The latest commit was totally unrelated to the issue you were
> > experiencing.  I have just gotten around to attempting to
> > reproduce your error ... I could not.  It seems to me to be
> > a pure SQL issue; using MySQL 3.23.34 or PostgreSQL 7.1
> > I got no errors? What versions are you using?
> > 
> > Roman
> > 
> > > Still getting this error in the charting routines:
> > >
> > > Chart Type:   Dst. IP address vs. Number of Alerts
> > >
> > > --------------------------------------------------------------------------
> > --
> > > ---
> > > Database ERROR:You have an error in your SQL syntax near 'FROM iphdr LEFT
> > > JOIN acid_ag_alert ON (iphdr.sid=acid_ag_alert.ag_sid AND iphdr.' at line
> > 1
> > >
> > > -----Original Message-----
> > > From: snort-users-admin at lists.sourceforge.net
> > > [mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of
> > > roman at ...438...
> > > Sent: Wednesday, May 23, 2001 12:44
> > > To: dmuz
> > > Cc: snort-users at lists.sourceforge.net
> > > Subject: [Snort-users] Re: ACID: Cannot send session cache limiter
> > >
> > >
> > > Fixed, and commited to CVS.
> > >
> > > Roman
> > >
> > > > hello,
> > > >
> > > > I am getting the following error when running yesterdays CVS version of
> > > > ACID.
> > > >
> > > > Warning: Cannot send session cache limiter - headers already sent
> > > > (output started at /var/www/htdocs/acid/acid/acid_action.inc:321) in
> > > > /var/www/htdocs/acid/acid/acid_common.php on line 116
> > > >
> > > > This error apears at the top of any page that is listing alert reports.
> > > >
> > > > I'm running Snort 1.8-beta5 (Build 24), PHP/4.0.5 and ACID 0.9.6b10 CVS
> > > > from 5.22.01.
> > > >
> > > > Note that I also recreated the acid_ag, acid_ag_alert and acid_ip_cache
> > > > from the latest included create_acid_tbls_mysql.sql script.
> > > >
> > > > cheers...
> > > > --
> > > > dmuz
> > > > http://sec.angrypacket.com/
> > > >
> > > >
> > >
> > >
> > >
> > > ---------------------------------------------
> > > This message was sent using Voicenet WebMail.
> > >       http://www.voicenet.com/webmail/
> > >
> > >
> > >
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users at lists.sourceforge.net
> > > Go to this URL to change user options or unsubscribe:
> > > http://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > >
> > >
> > >
> > 
> > 
> > 
> > ---------------------------------------------
> > This message was sent using Voicenet WebMail.
> >       http://www.voicenet.com/webmail/
> > 
> > 
> > 
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > 
> > 
> > 
> 
> 
> 
> ---------------------------------------------
> This message was sent using Voicenet WebMail.
>       http://www.voicenet.com/webmail/
> 
> 
> 



---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/






More information about the Snort-users mailing list