[Snort-users] acid/base recovery

Dominik Gehl dgehl at ...13341...
Mon Jun 6 09:17:36 EDT 2005


Hi,

you can find the MySQL db script to create the ACID database in the
snort distribution at snort-2.3.3/schemas/create_mysql

Dominik

On Mon, 2005-06-06 at 12:12 -0400, John Hally wrote:
> Hello All,
> 
>  
> 
> I had the unfortunate happen and lost a raid array that housed all of
> my alert data for BASE.  I'm in the midst of recovering and it looks
> like that the sql files in the BASE tar file are not the only one(s)
> needed to rebuild the database.  Is acid's original sql table setup
> required as well?  Base is erroring with:
> 
>  
> 
> Database ERROR: Table 'snort.iphdr' doesn't exist
> 
>  
> 
> It does not exist after I've run:
> 
>  
> 
> Mysql -u (user) -p -D snort < create_base_tbls_mysql.sql
> 
>  
> 
> The tables have been created and this is what I have in
> my /usr/lib/mysql/snort directory:
> 
>  
> 
>  
> 
>  
> 
>  
> 
>  
> 
> acid_ag_alert.frm 
> 
> acid_ag.frm  acid
> 
> event.frm 
> 
> acid_ip_cache.frm 
> 
> base_roles.frm 
> 
> base_users.frm
> 
> acid_ag_alert.MYD
> 
> acid_ag.MYD  acid_event.MYD
> 
> acid_ip_cache.MYD
> 
> base_roles.MYD
> 
> base_users.MYD
> 
> acid_ag_alert.MYI
> 
> acid_ag.MYI
> 
> acid_event.MYI
> 
> acid_ip_cache.MYI
> 
> base_roles.MYI
> 
> base_users.MYI
> 
>  
> 
> Thanks in advance!
> 
>  
> 






More information about the Snort-users mailing list