[Snort-users] Acid and Sensor ID's

Gene Gomez gegomez at ...6324...
Mon Jul 29 11:09:14 EDT 2002


Stop Snort.  If you're using mysql, then do this from the mysql client:

USE snort;
UPDATE sensor SET sid='<correct_sid>' WHERE hostname='<hostname>';
EXIT;

Best of luck.

Gene Gomez

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Hall, Duane
Sent: Monday, July 29, 2002 8:47 AM
To: Snort Userslist
Subject: [Snort-users] Acid and Sensor ID's


I had to reboot a sensor over the weekend and now the sensor number in ACID
has changed.  Now the alerts are not logging correctly.  Any ideas?

Duane

Duane Hall
Security Administrator
Hastings Entertainment
806-351-2300 x-3945
Duane.Hall at ...4888...

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GIT d+ s:- a- C+ UL++ P+ L++ E--- W++ N++ o K- w---
O- M-- V-- PS PE Y PGP t++ 5 X R- tv+ b+ DI++ D+
G e+ h---- r+++ y++++
------END GEEK CODE BLOCK------


-------------------------------------------------------
This sf.net email is sponsored by: Dice - The leading online job board
for high-tech professionals. Search and apply for tech jobs today!
http://seeker.dice.com/seeker.epl?rel_code1
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users









More information about the Snort-users mailing list