Snort mailing list archives

How to delete alerts without acid


From: Jason Humes <jhumes () acs on ca>
Date: Mon, 15 Mar 2004 12:49:28 -0500

Hi
I've got snort installed on a notebook which we use as a portable IDS.  We
take this out and drop it off at sites which may be experiencing problems.
This notebook is a P4 2.8ghz with 512RAM and 20gig HD.  I'm trying to delete
about 300000 alerts from the Snort DB through the ACID console, yet the page
never seems to refresh after I select the alerts and hit Delete.  The HD
activity light stays lit constant, yet no refresh (even after 30minutes).
Is there any way to clear up the alert database without using acid?  Could
this problem be related to something other than the large number of alerts?
Thanks

Jason D. Humes
  

**********************************************************************

Confidentiality Notice: 

The information contained in this e-mail and any attachments may be legally
privileged and confidential. If you are not an intended recipient, you are
hereby notified that any dissemination, distribution or copying of this
e-mail and any attachments is strictly prohibited. If you received this
e-mail in error, please notify the sender and permanently delete the e-mail
and any attachments immediately. You should not retain, copy or use this
e-mail or any attachment for any purpose, nor disclose all or any part of
the contents to any other person. 

Thank you. 



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: