[Snort-users] Problem with ACID reports

Steve Halligan giermo at ...187...
Thu Mar 21 13:09:21 EST 2002

Can you verify that data is actually going into the database?
(with a client for you database flavour--for example in mysql:
#>mysql -u snortuser -p snort
mysql>SELECT * from event;
should sit out a bunch of events.

If data is going in, what database are you using?
If no data is going in, look to snort for the problem (your database config
in snort)

and upgrade to acid 0.9.6b20 or 21 (if it is released yet)
there was a bug with oracle (i think) that involved spaces in SQL syntax.


>Hi all,
>I am using Snort version 1.8.3 and ACID v0.9.6b19 
>If I select any of these reports
>Last Source Ports: any , TCP , UDP 
>Last Destination Ports: any , TCP , UDP 
>Most Frequent Source Ports: any , TCP , UDP 
>Most Frequent Destination Ports: any , TCP , UDP 
>I get the following error:
>Database ERROR:Database ERROR:You have an error in your SQL 
>syntax near '' at line 1
>I have not been able to find any obvious problems with the 
>code but then I know nothing about SQL syntax. Anyone have any 
>ideas on a solution for the problem?
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>Snort-users list archive:

More information about the Snort-users mailing list