Snort mailing list archives

Re: Database schema gone awry?


From: Mark Rowlands <mark.rowlands () minmail net>
Date: Thu, 19 Jul 2001 22:07:58 +0200

Ah the perils of backup / restore scripts...... I dumped the db and then 
recreated with the new schema and then inserted, from the backup,
my old records...including one into schema V 1.00  Doh!...so fixed that but 
now getting other errors so we are going to do it all again and be a bit 
less cavalier this time.  Sorry for the bother....all entirely my fault :-(


On Thursday 19 July 2001 09:47, roman () danyliw com wrote:

Mark,

The database plug-in in Snort v 1.8 only supports DB schemas
v103+.  Otherwise, it flags you with the "old schema" fatal error.
I checked the create_mysql script in CVS and the 1.8.1 (Build 44)
and it is correct; it will create a v103 database.

From your snort output, I can tell that you are running a v100
schema which is no longer supported.

database: schema version = 100

Are you sure that you are using the latest script to re-create the
database?  Try bringing up the mysql client at type:

mysql> SELECT * from schema;

Do you see the following output?

mysql> select * from schema;
+------+---------------------+

| vseq | ctime               |

+------+---------------------+

|  103 | 2001-07-05 09:20:30 |

+------+---------------------+
1 row in set (0.00 sec)

Roman

cvsupped snort today,   dumped mysql db,  deleted db, recreated db from
contrib script and now we get

-*> Snort! <*-
Version 1.8.1-beta2 (Build 44)
By Martin Roesch (roesch () sourcefire com, www.snort.org)
Log directory = /spare/snort/logs
        --== Initializing Snort ==--
Checking PID path...
PATH_VARRUN is set to /var/run/ on this operating system
Initializing Network Interface xl0
Decoding Ethernet on interface xl0
Initializing Preprocessors!
Initializing Plug-ins!
Initializating Output Plugins!
Parsing Rules file /spare/snort/rules/snort.rules
+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...

Using LOCAL time
database: compiled support for ( mysql )
database: configured to use mysql
database: database name = snort
database:          user = snort
database:          host = 192.168.0.2
database: password is set
database:   sensor name = 62.5.32.206
database:     sensor id = 3
database: schema version = 100
database: The underlying database seems to be running an older version of
the DB schema.
          Please re-run the appropriate DB creation script (e.g.
create_mysql, create_postgresql, create_oracle) located in the contrib\
directory. Fatal Error, Quitting..

acid .96b13 shows schema version 100

Version 1.8-beta5 (Build 22)  still runs ok..... is there a new
create_mysql lying around somewhere? I have checked the version from the
official  1.8.1 download and this is the same as the cvs version...what
gives?

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

---------------------------------------------
This message was sent using Voicenet WebMail.
      http://www.voicenet.com/webmail/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: