Snort mailing list archives
Large mysql files in folder /usr/local/mysql/var (Redhat Linux 8.0 ver)
From: "Sudhakar Gummadi" <sgummadi () sitelite com>
Date: Mon, 8 Sep 2003 15:24:26 -0700
I was wondering how I could resolve the issue of the file size growing very large more than 1GB in the following folder /usr/local/mysql/var with the file names as IDSsnort-bin.001 ,002 and so on... One of our Snort box running on Linux had used 100% disk space and crashed. Are there any automated scripts which can delete the older file to make space on the hard disk. Any suggestion really appreciated. Thanks SG -----Original Message----- From: Erek Adams [mailto:erek () snort org] Sent: Wednesday, August 06, 2003 8:33 AM To: m.stiefenhofer () ecofis de Cc: rvennell () dbu edu; snort-users () lists sourceforge net Subject: Re: Antwort: [Snort-users] IP Range Problems On Wed, 6 Aug 2003 m.stiefenhofer () ecofis de wrote:
i want snort to look at the ip range of 10.5.0.1 - 10.5.4.254 but i cant figure out how to input this into the ip list. how do i put that into the var HOME_NET list? thanks for any helpvar HOME_NET 10.5.0.0/22
Sorry, that's not going to work. Ipcalc is your friend! [erek@fred]~>ipcalc 10.5.0.0/22 Address: 10.5.0.0 00001010.00000101.000000 00.00000000 Netmask: 255.255.252.0 = 22 11111111.11111111.111111 00.00000000 Wildcard: 0.0.3.255 00000000.00000000.000000 11.11111111 => Network: 10.5.0.0/22 00001010.00000101.000000 00.00000000 (Class A) Broadcast: 10.5.3.255 00001010.00000101.000000 11.11111111 HostMin: 10.5.0.1 00001010.00000101.000000 00.00000001 HostMax: 10.5.3.254 00001010.00000101.000000 11.11111110 Hosts/Net: 1022 (Private Internet RFC 1918) It won't catch the 10.5.4.x net. You'll need to use something else. Since the more subnets you throw at HOME_NET the more Snort has to work, you'll come out with: var HOME_NET [10.5.0.0/22,10.5.4.0/24] Cheers! ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Large mysql files in folder /usr/local/mysql/var (Redhat Linux 8.0 ver) Sudhakar Gummadi (Sep 08)
- Re: Large mysql files in folder /usr/local/mysql/var (Redhat Linux 8.0 ver) K Anderson (Sep 08)
- Re: Large mysql files in folder /usr/local/mysql/var (Redhat Linux 8.0 ver) Darryl Luff (Sep 09)
- Re: Large mysql files in folder /usr/local/mysql/var (Redhat Linux 8.0 ver) Ahmad Masood Shah (Sep 09)
- Re: Large mysql files in folder /usr/local/mysql/var (Redhat Linux 8.0 ver) Erek Adams (Sep 09)