RE: How to delete alerts without acid

["Hutchinson, Andrew" <andrew.hutchinson () Vanderbilt Edu>]

Throw there commands into a file, and then redirect them into mysql.
These tables will be cleared, but the table structure will remain.

delete from data;
delete from event;
delete from icmphdr;
delete from iphdr;
delete from opt;
delete from tcphdr;
delete from udphdr;


HTH,

Andrew Hutchinson - Network Security
Vanderbilt University Medical Center
(615) 936-2856


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Jason
Humes
Sent: Monday, March 15, 2004 11:49 AM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] How to delete alerts without acid


Hi
I've got snort installed on a notebook which we use as a portable IDS.
We take this out and drop it off at sites which may be experiencing
problems. This notebook is a P4 2.8ghz with 512RAM and 20gig HD.  I'm
trying to delete about 300000 alerts from the Snort DB through the ACID
console, yet the page never seems to refresh after I select the alerts
and hit Delete.  The HD activity light stays lit constant, yet no
refresh (even after 30minutes). Is there any way to clear up the alert
database without using acid?  Could this problem be related to something
other than the large number of alerts? Thanks

Jason D. Humes
  

**********************************************************************

Confidentiality Notice: 

The information contained in this e-mail and any attachments may be
legally privileged and confidential. If you are not an intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this e-mail and any attachments is strictly prohibited. If
you received this e-mail in error, please notify the sender and
permanently delete the e-mail and any attachments immediately. You
should not retain, copy or use this e-mail or any attachment for any
purpose, nor disclose all or any part of the contents to any other
person. 

Thank you. 



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users