[Snort-users] ACID and archive database

Slighter, Tim tslighter at ...5174...
Wed Jul 17 06:50:02 EDT 2002

I have been running into similar problems.  When moving/archiving or even if
I am deleting, the first screen moves over just fine, but the second time
around they do not.   The "ODD" workaround I have been compelled to resort
to is after an archive/move/delete or whatever else it may be, I then click
on "HOME" to go back to the start page of ACID and then go back in and
move/archive another batch.  This seems to work but might not be the answer
most people are looking for.  Sure that someone is going to see this and
have a more substantial and acceptable answer

-----Original Message-----
From: Jorge Santos [mailto:jorgesantos at ...6300...]
Sent: Wednesday, July 17, 2002 3:22 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] ACID and archive database

Hi list

I have a working snort 1.8.6 that outputs to a mysql database. To
analyse the alerts i use acid-0.9.6b21. When i try to move alerts, for
the first time in a session, to the archive database, all the alerts are
moved fine. But if i try to move say 500 alerts after i moved the first
ones, the alert database says it moved the 500 alerts, but the archive
database only shows about 100 new ones.

I created the DB's exactly with the same script that comes with snort

What can possibly be wrong?

Thanks in advance

   \_/      Jorge Alexandre Santos
   'v'      jorgesantos at ...6300...
  // \\     Tel : 212327300
 /(   )\    Fax : 212327301
  ^`~´^     Valnet Sado S.A. 

This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list