[Snort-users] MS SQL 2000 database setup for snort with snortdb-extra (osql syntax issues?)

McCash, John John.McCash at ...10979...
Tue Apr 27 06:36:13 EDT 2004


Guys,
	I've been digging into the snortdb-extra code, and it appears that the following lines are the ones actually causing the problem. The comments don't scan properly either, but I can just remove them.

INSERT INTO services(port, protocol, name, description) VALUES('188', '6', 'mumps', 'Plus Five\'s MUMPS');
INSERT INTO services(port, protocol, name, description) VALUES('188', '17', 'mumps', 'Plus Five\'s MUMPS');
INSERT INTO services(port, protocol, name, description) VALUES('513', '17', 'who', 'maintains data bases showing who\'s');
INSERT INTO services(port, protocol, name, description) VALUES('1392', '6', 'iclpv-pm', 'Print Manager');
INSERT INTO services(port, protocol, name, description) VALUES('1392', '17', 'iclpv-pm', 'Print Manager');
INSERT INTO services(port, protocol, name, description) VALUES('3264', '6', 'ccmail', 'cc:mail/lotus');
INSERT INTO services(port, protocol, name, description) VALUES('3264', '17', 'ccmail', 'cc:mail/lotus');

The issues seem to be with the escaped apostrophe, the colon, and the use of the word 'Manager'. Does anyone know the proper way to structure these lines for mssql?
		John
------------------------------------------------------------------------------------------------
This message is for the designated recipient only and may
contain privileged, proprietary, or otherwise private information.  
If you have received it in error, please notify the sender
immediately and delete the original.  Any unauthorized use of
this email is prohibited.
------------------------------------------------------------------------------------------------
[mf2]




More information about the Snort-users mailing list