Snort mailing list archives

Re: problem insert signature into ids database?


From: "Roman Danyliw" <roman () danyliw com>
Date: Mon, 12 Aug 2002 13:45:33 -0400 (EDT)

The signature id should indeed be unique.  I have a couple of questions:

- what version of snort are you using?
- have you every logged to the current database with another version of snort? 
If so which ones?

Roman

On Fri, 02 Aug 2002 21:28:52 +0800, Vincent Chen <vcba79 () ms1 hinet net> wrote :


Hi, all

I received the following log entry recently.

a. database: warning (SELECT sig_id FROM signature WHERE sig_name = 'X11
outbound client connection detected' AND sig_rev = 4 AND sig_sid = 1227
) returned more than one result
b. database: Problem inserting a new signature 'X11 outbound client
connection detected'
c. database: postgresql_error: ERROR: Cannot insert a duplicate key into
unique index sig_reference_pkey

I checked the database by giving sql command in a. and there are 40 rows
in output.
Is this normal? Should the signature in database be unique?
Is there any thing I can do to solve this problem?


Thanks,

Vincent Chen





-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users






-------------------------------------------------------
This sf.net email is sponsored by: Dice - The leading online job board
for high-tech professionals. Search and apply for tech jobs today!
http://seeker.dice.com/seeker.epl?rel_code=31
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: