Snort mailing list archives

Re: acid graphing

From: "Basil Saragoza" <snortlst () hotmail com>
Date: Fri, 1 Mar 2002 12:31:08 -0500

Here is the info:

1. "I'll assume the obvious that there are alerts in this alert group which
actually have events on this particular date range." - double-checked that,
yes, alerts are in this range.
2. Set the following:
debug_mode=1 in acid_conf.php

error_reporting = E_ALL
display_errors = On
display_startup_errors = On
log_errors = On
(in php.ini)

error_log I set to /var/log/acid/acid.log - nothing is logged there, but I
do have entries in error_log in apache directory.

Web server (apache) was restarted

(Errors that I see in error_log in apache duplicate the errors that are
diplayed on the web pages of acid, besides "PHP Warning: Undefined offset
<number>
in /usr/local/www/htdocs/phplot/phplot.php on line 1571" (and the same
regarding the line 814)
line 814 looks like this in phplot.php:
$mini = $this->data_values (0) (2);
line 1571 looks like this in phplot.php:
$xlab = $this->data_values ($x_tmp) (0);


3. Here are the info from the web page when I browse acid_main.php
Warning: Cannot send session cache limiter - headers already sent (output
started at /usr/local/www/htdocs/acid/acid_conf.php:236) in
/usr/local/www/htdocs/acid/acid_state_common.inc on line 92
Session Registered
History depth = 1

         URL: '/acid/acid_main.php' (referred by: '')
         PARAMETERS: ''
         CLIENT: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
         SERVER: Apache/1.3.22 (Unix) PHP/4.1.1 mod_ssl/2.8.5 OpenSSL/0.9.6b
         SERVER HW: Linux sno1 2.4.7-10 #1 Thu Sep 6 17:27:27 EDT 2001 i686
unknown
         DATABASE TYPE: mysql  DB ABSTRACTION VERSION:
         PHP VERSION: 4.1.1  PHP API: apache
         SESSION ID: 67c88118f36c2253e937d1bedab7c30e( 18668 bytes )

Checking for DB abstraction lib in
'/usr/local/www/htdocs/adodb/adodb.inc.php'
sensor #1: event.cid = 15255, acid_event.cid = 15255
Added 0 alert(s) to the Alert cache
Queried on : Fri March 01, 2002 12:15:21
Database: snort@localhost:3306    (schema version: 104)
Time window: [2002-02-20 14:14:32] - [2002-03-01 12:14:35]

4. Here is the info from the web page when I access graphs page:

Warning: Cannot send session cache limiter - headers already sent (output
started at /usr/local/www/htdocs/acid/acid_conf.php:236) in
/usr/local/www/htdocs/acid/acid_state_common.inc on line 92
Session Registered
History depth = 2


         URL: '/acid/acid_graph_main.php' (referred by:
'https://216.123.170.134/acid/acid_main.php&apos;)
         PARAMETERS: ''
         CLIENT: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
         SERVER: Apache/1.3.22 (Unix) PHP/4.1.1 mod_ssl/2.8.5 OpenSSL/0.9.6b
         SERVER HW: Linux sno1 2.4.7-10 #1 Thu Sep 6 17:27:27 EDT 2001 i686
unknown
         DATABASE TYPE: mysql  DB ABSTRACTION VERSION:
         PHP VERSION: 4.1.1  PHP API: apache
         SESSION ID: 67c88118f36c2253e937d1bedab7c30e( 28030 bytes )

Checking for DB abstraction lib in
'/usr/local/www/htdocs/adodb/adodb.inc.php'
sensor #1: event.cid = 15264, acid_event.cid = 15255
Added 9 alert(s) to the Alert cache

5. Here is the info from the web page when I try to generate the graph:

Warning: Cannot send session cache limiter - headers already sent (output
started at /usr/local/www/htdocs/acid/acid_conf.php:236) in
/usr/local/www/htdocs/acid/acid_state_common.inc on line 92
Session Registered
History depth = 3
URL: '/acid/acid_graph_main.php' (referred by:
'https://216.123.170.134/acid/acid_graph_main.php&apos;)
         PARAMETERS: ''
         CLIENT: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
         SERVER: Apache/1.3.22 (Unix) PHP/4.1.1 mod_ssl/2.8.5 OpenSSL/0.9.6b
         SERVER HW: Linux sno1 2.4.7-10 #1 Thu Sep 6 17:27:27 EDT 2001 i686
unknown
         DATABASE TYPE: mysql  DB ABSTRACTION VERSION:
         PHP VERSION: 4.1.1  PHP API: apache
         SESSION ID: 67c88118f36c2253e937d1bedab7c30e( 37392 bytes )
         Checking for DB abstraction lib in
'/usr/local/www/htdocs/adodb/adodb.inc.php'
sensor #1: event.cid = 15237, acid_event.cid = 15232
Added 5 alert(s) to the Alert cache

Chart criteria
Array
(
    [0] => LEFT JOIN acid_ag_alert ON (acid_event.sid=acid_ag_alert.ag_sid
AND acid_event.cid=acid_ag_alert.ag_cid)
    [1] => ag_id = 2 AND (  UNIX_TIMESTAMP(timestamp) >=
UNIX_TIMESTAMP('2002-02-21 010000')      AND  UNIX_TIMESTAMP(timestamp) <=
UNIX_TIMESTAMP('2002-02-28 000000')       )
)

chart_type = 1
data_source = 2
year_start year_end month_start month_end day_start day_end hour_start
hour_end
2002 2002 02 02 21 28 0 23
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 0
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 1
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 2
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 3
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 4
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 5
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 6
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 7
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 8
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 9
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 10
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 11
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 12
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 13
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 14
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 15
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 16
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 17
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 18
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 19
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 20
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 21
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 22
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
21 AND HOUR(timestamp) = 23
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 0
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 1
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 2
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 3
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 4
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 5
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 6
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 7
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 8
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 9
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 10
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 11
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 12
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 13
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 14
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 15
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 16
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 17
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 18
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 19
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 20
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 21
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 22
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
22 AND HOUR(timestamp) = 23
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 0
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 1
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 2
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 3
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 4
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 5
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 6
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 7
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 8
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 9
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 10
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 11
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 12
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 13
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 14
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 15
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 16
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 17
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 18
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 19
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 20
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 21
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 22
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
23 AND HOUR(timestamp) = 23
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 0
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 1
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 2
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 3
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 4
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 5
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 6
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 7
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 8
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 9
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 10
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 11
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 12
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 13
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 14
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 15
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 16
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 17
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 18
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 19
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 20
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 21
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 22
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
24 AND HOUR(timestamp) = 23
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 0
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 1
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 2
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 3
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 4
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 5
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH(timestamp) = 02 AND DAYOFMONTH(timestamp) =
25 AND HOUR(timestamp) = 6
SELECT count(*) FROM acid_event LEFT JOIN acid_ag_alert ON
(acid_event.sid=acid_ag_alert.ag_sid AND
acid_event.cid=acid_ag_alert.ag_cid) WHERE ag_id = 2 AND
 UNIX_TIMESTAMP(timestamp) >= UNIX_TIMESTAMP('2002-02-21 010000') AND
UNIX_TIMESTAMP(timestamp) <= UNIX_TIMESTAMP('2002-02-28 000000') ) AND
YEAR(timestamp) = 2002 AND MONTH


There are thousands of entries like that - if you need I van send them





----- Original Message -----
From: "Roman Danyliw" <roman () danyliw com>
To: "Basil Saragoza" <snortlst () hotmail com>
Cc: <snort-users () lists sourceforge net>
Sent: Friday, March 01, 2002 10:13 AM
Subject: Re: [Snort-users] acid graphing

How do I set debug_mode=1 and where do I look for debugging info?


http://acidlab.sourceforge.net/acid_faq.html#faq_d5

Chart Begin: 1-27-February-2002
Chart End: 23-28-February 2002


I'll assume the obvious that there are alerts in this alert group which

actually

have events on this particular date range.

Roman

On Fri, 1 Mar 2002 09:45:54 -0500, "Basil Saragoza" <snortlst () hotmail com>

wrote

O.K As I mentioned before  I created the 'Alerts' AG and then assigned

alerts to it.Then I go to the Graph Alert Data page and choose the
following:
Chart type: Time (hour) vs. number of alerts.
Chart Period: No period (Choosing other parameters doesn't help either)
Chart type: Bar (choosinf other parameters doesn't help)
Chart Begin: 1-27-February-2002
Chart End: 23-28-February 2002
Data Source: AG that I created and populated ('Alerts')

How do I set debug_mode=1 and where do I look for debugging info?

thx.
----- Original Message -----
From: "Roman Danyliw" <roman () danyliw com>
To: "Basil Saragoza" <snortlst () hotmail com>
Cc: <snort-users () lists sourceforge net>
Sent: Thursday, February 28, 2002 5:15 PM
Subject: Re: [Snort-users] acid graphing

Can we have some more details:

- what kind of graph are you trying to make (exact parameters)?
- can you run this operation with debug_mode=1 (does this provide any

more

info?)

Roman

On Thu, 28 Feb 2002 12:56:53 -0500, "Basil Saragoza"

<snortlst () hotmail com>

wrote :

Please ignore previous message.Error messaeg that I see know is:
No data points to plot
----- Original Message -----
From: "Scott Fringer" <fringsm () is2 hsnet ufl edu>
To: "Basil Saragoza" <snortlst () hotmail com>
Cc: <snort-users () lists sourceforge net>
Sent: Thursday, February 28, 2002 11:49 AM
Subject: Re: [Snort-users] acid graphing

Basil,
  You have defined no Alert Groups in the Alert Group Maintenance

page.

You need to create a group to assign alerts to, and then select

that

group

to get graphs.

Scott

Scott Fringer                              Shands Healthcare @

U.F.

Network Systems Analyst                        Gainesville, FL

On Thu, 28 Feb 2002, Basil Saragoza wrote:

When I try to see graphs on acid (v. b20) the get the following

error

message:
No AG was specified. Using all alerts.
And no graphs are displayed.
when I open Data source AG drop-down menu I don't see any

choices...


Things I checked:
1. php was compiled with gd
2. pages examples/test_setup.php displayes correctly two

charts -

png

and

jpg
3. valid chart file format(png) is specifoed in

$chart_file_format


Any ideas?

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread:

acid graphing Basil Saragoza (Feb 28)
- Re: acid graphing Scott Fringer (Feb 28)
  - Re: acid graphing Basil Saragoza (Feb 28)
  - Re: acid graphing Basil Saragoza (Feb 28)
- <Possible follow-ups>
- RE: acid graphing Kresna Prawira (Feb 28)
  - Re: acid graphing Basil Saragoza (Mar 01)
- Re: acid graphing Roman Danyliw (Feb 28)
  - Re: acid graphing Basil Saragoza (Mar 01)
- Re: acid graphing Roman Danyliw (Mar 01)
  - Re: acid graphing Basil Saragoza (Mar 01)
- Re: acid graphing Roman Danyliw (Mar 01)