[Snort-users] Snort DB Question

Nick Patellis NPatellis at ...6343...
Thu Jul 25 11:38:05 EDT 2002


Thanks for helping me see my nose!

-----Original Message-----
From: Joe McAlerney [mailto:joey at ...47...] 
Sent: Thursday, July 25, 2002 2:28 PM
To: Nick Patellis
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Snort DB Question

Hi Nick,

It's the sig_name in the signature table:

CREATE TABLE signature ( sig_id       INT          UNSIGNED NOT NULL
                         sig_name     VARCHAR(255) NOT
NULL,              <------
                         sig_class_id INT          UNSIGNED NOT NULL,
                         sig_priority INT          UNSIGNED,
                         sig_rev      INT          UNSIGNED,
                         sig_sid      INT          UNSIGNED,
                         PRIMARY KEY (sig_id),
                         INDEX   sign_idx (sig_name(20)),
                         INDEX   sig_class_id_idx (sig_class_id));


Joe McAlerney
Silicon Defense: IDS Solutions

More information about the Snort-users mailing list