Snort mailing list archives

create-mysql error


From: twig les <twigles () yahoo com>
Date: Tue, 4 Feb 2003 10:37:16 -0800 (PST)

Hey all, in upgrading an old 1.87 box to 1.90 (build
209) I ran into this when running the create_mysql
script.  

L# ./create_mysql
Too many ('s.

Naturally I looked for an unmatched "(" but couldn't
find one (checked three times already, but I suck at
this).  Has anyone run into this before?  I just
downloaded the tarball from snort.org about 30 minutes
ago and in case anyone is curious I pasted the scripts
below.


L# more create_mysql 
# Copyright (C) 2000-2002 Carnegie Mellon University
#
# Maintainer: Roman Danyliw <rdd () cert org>,
<roman () danyliw com>
#
# Original Author(s): Jed Pickel <jed () pickel net>   
(2000-2001)
#                     Roman Danyliw <rdd () cert org>
#                     Todd Schrubb <tls () cert org>
#
# This program is free software; you can redistribute
it and/or modify
# it under the terms of the GNU General Public License
as published by
# the Free Software Foundation; either version 2 of
the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will
be useful,
# but WITHOUT ANY WARRANTY; without even the implied
warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
 See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General
Public License
# along with this program; if not, write to the Free
Software
# Foundation, Inc., 59 Temple Place - Suite 330,
Boston, MA 02111-1307, USA.

CREATE TABLE schema ( vseq        INT      UNSIGNED
NOT NULL,
                      ctime       DATETIME NOT NULL,
                      PRIMARY KEY (vseq));
INSERT INTO schema  (vseq, ctime) VALUES ('106',
now());       

CREATE TABLE event  ( sid         INT      UNSIGNED
NOT NULL,
                      cid         INT      UNSIGNED
NOT NULL,
                      signature   INT      UNSIGNED
NOT NULL, 
                      timestamp            DATETIME
NOT NULL,
                      PRIMARY KEY (sid,cid),
                      INDEX       sig (signature),
                      INDEX       time (timestamp));

CREATE TABLE signature ( sig_id       INT         
UNSIGNED NOT NULL AUTO_INCREMENT,
                         sig_name     VARCHAR(255) NOT
NULL,
                         sig_class_id INT         
UNSIGNED NOT NULL,
                         sig_priority INT         
UNSIGNED,
                         sig_rev      INT         
UNSIGNED,
                         sig_sid      INT         
UNSIGNED,
                         PRIMARY KEY (sig_id),
                         INDEX   sign_idx
(sig_name(20)),
                         INDEX   sig_class_id_idx
(sig_class_id));

CREATE TABLE sig_reference (sig_id  INT    UNSIGNED
NOT NULL,
                            ref_seq INT    UNSIGNED
NOT NULL,
                            ref_id  INT    UNSIGNED
NOT NULL,
                            PRIMARY KEY(sig_id,
ref_seq));

CREATE TABLE reference (  ref_id        INT        
UNSIGNED NOT NULL AUTO_INCREMENT,
                          ref_system_id INT        
UNSIGNED NOT NULL,
                          ref_tag       TEXT NOT NULL,
                          PRIMARY KEY (ref_id));

CREATE TABLE reference_system ( ref_system_id   INT   
     UNSIGNED NOT NULL AUTO_INCREMENT,
                                ref_system_name
VARCHAR(20),
                                PRIMARY KEY
(ref_system_id));

CREATE TABLE sig_class ( sig_class_id        INT   
UNSIGNED NOT NULL AUTO_INCREMENT,
                         sig_class_name     
VARCHAR(60) NOT NULL,
                         PRIMARY KEY (sig_class_id),
                         INDEX       (sig_class_id),
                         INDEX      
(sig_class_name));

# store info about the sensor supplying data
CREATE TABLE sensor ( sid         INT      UNSIGNED
NOT NULL AUTO_INCREMENT,
                      hostname    TEXT,
                      interface   TEXT,
                      filter      TEXT,
                      detail      TINYINT,
                      encoding    TINYINT,
                      last_cid    INT      UNSIGNED
NOT NULL,
                      PRIMARY KEY (sid));

# All of the fields of an ip header
CREATE TABLE iphdr  ( sid         INT      UNSIGNED
NOT NULL,
                      cid         INT      UNSIGNED
NOT NULL,
                      ip_src      INT      UNSIGNED
NOT NULL,
                      ip_dst      INT      UNSIGNED
NOT NULL,
                      ip_ver      TINYINT  UNSIGNED,
                      ip_hlen     TINYINT  UNSIGNED,
                      ip_tos      TINYINT  UNSIGNED,
                      ip_len      SMALLINT UNSIGNED,
                      ip_id       SMALLINT UNSIGNED,
                      ip_flags    TINYINT  UNSIGNED,
                      ip_off      SMALLINT UNSIGNED,
                      ip_ttl      TINYINT  UNSIGNED,
                      ip_proto    TINYINT  UNSIGNED
NOT NULL,
                      ip_csum     SMALLINT UNSIGNED,
                      PRIMARY KEY (sid,cid),
                      INDEX ip_src (ip_src),
                      INDEX ip_dst (ip_dst));

# All of the fields of a tcp header
CREATE TABLE tcphdr(  sid         INT      UNSIGNED
NOT NULL,
                      cid         INT      UNSIGNED
NOT NULL,
                      tcp_sport   SMALLINT UNSIGNED
NOT NULL,
                      tcp_dport   SMALLINT UNSIGNED
NOT NULL,
                      tcp_seq     INT      UNSIGNED,
                      tcp_ack     INT      UNSIGNED,
                      tcp_off     TINYINT  UNSIGNED,
                      tcp_res     TINYINT  UNSIGNED,
                      tcp_flags   TINYINT  UNSIGNED
NOT NULL,
                      tcp_win     SMALLINT UNSIGNED,
                      tcp_csum    SMALLINT UNSIGNED,
                      tcp_urp     SMALLINT UNSIGNED,
                      PRIMARY KEY (sid,cid),
                      INDEX       tcp_sport
(tcp_sport),
                      INDEX       tcp_dport
(tcp_dport),
                      INDEX       tcp_flags
(tcp_flags));

# All of the fields of a udp header
CREATE TABLE udphdr(  sid         INT      UNSIGNED
NOT NULL,
                      cid         INT      UNSIGNED
NOT NULL,
                      udp_sport   SMALLINT UNSIGNED
NOT NULL,
                      udp_dport   SMALLINT UNSIGNED
NOT NULL,
                      udp_len     SMALLINT UNSIGNED,
                      udp_csum    SMALLINT UNSIGNED,
                      PRIMARY KEY (sid,cid),
                      INDEX       udp_sport
(udp_sport),
                      INDEX       udp_dport
(udp_dport));

# All of the fields of an icmp header
CREATE TABLE icmphdr( sid         INT      UNSIGNED
NOT NULL,
                      cid         INT      UNSIGNED
NOT NULL,
                      icmp_type   TINYINT  UNSIGNED
NOT NULL,
                      icmp_code   TINYINT  UNSIGNED
NOT NULL,
                      icmp_csum   SMALLINT UNSIGNED,
                      icmp_id     SMALLINT UNSIGNED,
                      icmp_seq    SMALLINT UNSIGNED,
                      PRIMARY KEY (sid,cid),
                      INDEX       icmp_type
(icmp_type));

# Protocol options
CREATE TABLE opt    ( sid         INT      UNSIGNED
NOT NULL,
                      cid         INT      UNSIGNED
NOT NULL,
                      optid       INT      UNSIGNED
NOT NULL,
                      opt_proto   TINYINT  UNSIGNED
NOT NULL,
                      opt_code    TINYINT  UNSIGNED
NOT NULL,
                      opt_len     SMALLINT,
                      opt_data    TEXT,
                      PRIMARY KEY (sid,cid,optid));

# Packet payload
CREATE TABLE data   ( sid           INT      UNSIGNED
NOT NULL,
                      cid           INT      UNSIGNED
NOT NULL,
                      data_payload  TEXT,
                      PRIMARY KEY (sid,cid));

# encoding is a lookup table for storing encoding
types
CREATE TABLE encoding(encoding_type TINYINT UNSIGNED
NOT NULL,
                      encoding_text TEXT NOT NULL,
                      PRIMARY KEY (encoding_type));
INSERT INTO encoding (encoding_type, encoding_text)
VALUES (0, 'hex');
INSERT INTO encoding (encoding_type, encoding_text)
VALUES (1, 'base64');
INSERT INTO encoding (encoding_type, encoding_text)
VALUES (2, 'ascii');

# detail is a lookup table for storing different
detail levels
CREATE TABLE detail  (detail_type TINYINT UNSIGNED NOT
NULL,
                      detail_text TEXT NOT NULL,
                      PRIMARY KEY (detail_type));
INSERT INTO detail (detail_type, detail_text) VALUES
(0, 'fast');
INSERT INTO detail (detail_type, detail_text) VALUES
(1, 'full');

# be sure to also use the snortdb-extra tables if you
want
# mappings for tcp flags, protocols, and ports


=====
-----------------------------------------------------------
Know yourself and know your enemy and you will never fear defeat.         
-----------------------------------------------------------

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: