[Snort-users] Large mysql files in folder /usr/local/mysql/var (Redhat Linux 8.0 ver)

Ahmad Masood Shah jahil at ...9835...
Tue Sep 9 05:29:08 EDT 2003


I can give you script that will purge your sql database as you required.
contact me off the list.

-- 

Best Regs,
Masood Ahmad Shah
System Administrator

^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
|   * * * * * * * * * * * * * * * * * * * * * * * *
|   Fibre Net (Pvt) Ltd. Lahore, Pakistan
|   Tel: +92-42-6677024
|   Mobile: +92-300-4277367
|   http://www.fibre.net.pk
|   * * * * * * * * * * * * * * * * * * * * * * * *
^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

----- Original Message ----- 
From: "Darryl Luff" <dluff at ...9557...>
To: "Sudhakar Gummadi" <sgummadi at ...8733...>
Cc: <snort-users at lists.sourceforge.net>
Sent: Tuesday, September 09, 2003 4:47 PM
Subject: Re: [Snort-users] Large mysql files in folder /usr/local/mysql/var
(Redhat Linux 8.0 ver)


| Sudhakar Gummadi wrote:
|
| >I was wondering how I could resolve the issue of the file size growing
very large more than 1GB in the following folder /usr/local/mysql/var with
the file names as
| >
| > IDSsnort-bin.001 ,002 and so on... One of our Snort box running on Linux
had used 100%  disk space and crashed.
| >
| > Are there any automated scripts which can delete the older file to make
space on the hard disk.
| >
| If snort is logging to mysql you would need to run an sql query to
| remove the old entries, rather than just deleting the files. If you
| don't need the database capability, you might look at other logging
| options that are more economical with disk space, but whatever you use
| there needs to be some process in place to manage the logs.
|
|
|
|
|
| -------------------------------------------------------
| This sf.net email is sponsored by:ThinkGeek
| Welcome to geek heaven.
| http://thinkgeek.com/sf
| _______________________________________________
| Snort-users mailing list
| Snort-users at lists.sourceforge.net
| Go to this URL to change user options or unsubscribe:
| https://lists.sourceforge.net/lists/listinfo/snort-users
| Snort-users list archive:
| http://www.geocrawler.com/redir-sf.php3?list=snort-users
|





More information about the Snort-users mailing list