[Snort-users] Executing SQL (postgresql) to get results?

Kevin Brown Kevin.M.Brown at ...1022...
Fri Oct 4 13:13:06 EDT 2002

 The ip address are store in the database as one number rather than four
octets of numbers as in the pre-100 schema.  I know there is functions in
MySQL to do the conversion back to a dotted octet, but don't know about

e.g. would be store in the database as:

120 * 256^3 + 210 * 256^2 + 140 * 256 + 16 = 2027064336

-----Original Message-----
From: Sloan Bowman
To: Snort Users List
Sent: 10/4/02 9:07 AM
Subject: [Snort-users] Executing SQL (postgresql) to get results?

I am wanting to create a view in postgresql to show me the signature
ipdst and timestamp and I can' figure out how I would do this with the
the database is currently setup. I see no reference to any ip addresses 
anywhere in the database. The reason I am wanting to do this is because
am currently using ACID and its slow as Christmas archiving and deleting

data from the database. I want to use EXPLAIN to test out why this is
case. Thanks again.

This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20021004/abcf3535/attachment.html>

More information about the Snort-users mailing list