Snort mailing list archives
create-mysql error
From: twig les <twigles () yahoo com>
Date: Tue, 4 Feb 2003 10:37:16 -0800 (PST)
Hey all, in upgrading an old 1.87 box to 1.90 (build
209) I ran into this when running the create_mysql
script.
L# ./create_mysql
Too many ('s.
Naturally I looked for an unmatched "(" but couldn't
find one (checked three times already, but I suck at
this). Has anyone run into this before? I just
downloaded the tarball from snort.org about 30 minutes
ago and in case anyone is curious I pasted the scripts
below.
L# more create_mysql
# Copyright (C) 2000-2002 Carnegie Mellon University
#
# Maintainer: Roman Danyliw <rdd () cert org>,
<roman () danyliw com>
#
# Original Author(s): Jed Pickel <jed () pickel net>
(2000-2001)
# Roman Danyliw <rdd () cert org>
# Todd Schrubb <tls () cert org>
#
# This program is free software; you can redistribute
it and/or modify
# it under the terms of the GNU General Public License
as published by
# the Free Software Foundation; either version 2 of
the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will
be useful,
# but WITHOUT ANY WARRANTY; without even the implied
warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General
Public License
# along with this program; if not, write to the Free
Software
# Foundation, Inc., 59 Temple Place - Suite 330,
Boston, MA 02111-1307, USA.
CREATE TABLE schema ( vseq INT UNSIGNED
NOT NULL,
ctime DATETIME NOT NULL,
PRIMARY KEY (vseq));
INSERT INTO schema (vseq, ctime) VALUES ('106',
now());
CREATE TABLE event ( sid INT UNSIGNED
NOT NULL,
cid INT UNSIGNED
NOT NULL,
signature INT UNSIGNED
NOT NULL,
timestamp DATETIME
NOT NULL,
PRIMARY KEY (sid,cid),
INDEX sig (signature),
INDEX time (timestamp));
CREATE TABLE signature ( sig_id INT
UNSIGNED NOT NULL AUTO_INCREMENT,
sig_name VARCHAR(255) NOT
NULL,
sig_class_id INT
UNSIGNED NOT NULL,
sig_priority INT
UNSIGNED,
sig_rev INT
UNSIGNED,
sig_sid INT
UNSIGNED,
PRIMARY KEY (sig_id),
INDEX sign_idx
(sig_name(20)),
INDEX sig_class_id_idx
(sig_class_id));
CREATE TABLE sig_reference (sig_id INT UNSIGNED
NOT NULL,
ref_seq INT UNSIGNED
NOT NULL,
ref_id INT UNSIGNED
NOT NULL,
PRIMARY KEY(sig_id,
ref_seq));
CREATE TABLE reference ( ref_id INT
UNSIGNED NOT NULL AUTO_INCREMENT,
ref_system_id INT
UNSIGNED NOT NULL,
ref_tag TEXT NOT NULL,
PRIMARY KEY (ref_id));
CREATE TABLE reference_system ( ref_system_id INT
UNSIGNED NOT NULL AUTO_INCREMENT,
ref_system_name
VARCHAR(20),
PRIMARY KEY
(ref_system_id));
CREATE TABLE sig_class ( sig_class_id INT
UNSIGNED NOT NULL AUTO_INCREMENT,
sig_class_name
VARCHAR(60) NOT NULL,
PRIMARY KEY (sig_class_id),
INDEX (sig_class_id),
INDEX
(sig_class_name));
# store info about the sensor supplying data
CREATE TABLE sensor ( sid INT UNSIGNED
NOT NULL AUTO_INCREMENT,
hostname TEXT,
interface TEXT,
filter TEXT,
detail TINYINT,
encoding TINYINT,
last_cid INT UNSIGNED
NOT NULL,
PRIMARY KEY (sid));
# All of the fields of an ip header
CREATE TABLE iphdr ( sid INT UNSIGNED
NOT NULL,
cid INT UNSIGNED
NOT NULL,
ip_src INT UNSIGNED
NOT NULL,
ip_dst INT UNSIGNED
NOT NULL,
ip_ver TINYINT UNSIGNED,
ip_hlen TINYINT UNSIGNED,
ip_tos TINYINT UNSIGNED,
ip_len SMALLINT UNSIGNED,
ip_id SMALLINT UNSIGNED,
ip_flags TINYINT UNSIGNED,
ip_off SMALLINT UNSIGNED,
ip_ttl TINYINT UNSIGNED,
ip_proto TINYINT UNSIGNED
NOT NULL,
ip_csum SMALLINT UNSIGNED,
PRIMARY KEY (sid,cid),
INDEX ip_src (ip_src),
INDEX ip_dst (ip_dst));
# All of the fields of a tcp header
CREATE TABLE tcphdr( sid INT UNSIGNED
NOT NULL,
cid INT UNSIGNED
NOT NULL,
tcp_sport SMALLINT UNSIGNED
NOT NULL,
tcp_dport SMALLINT UNSIGNED
NOT NULL,
tcp_seq INT UNSIGNED,
tcp_ack INT UNSIGNED,
tcp_off TINYINT UNSIGNED,
tcp_res TINYINT UNSIGNED,
tcp_flags TINYINT UNSIGNED
NOT NULL,
tcp_win SMALLINT UNSIGNED,
tcp_csum SMALLINT UNSIGNED,
tcp_urp SMALLINT UNSIGNED,
PRIMARY KEY (sid,cid),
INDEX tcp_sport
(tcp_sport),
INDEX tcp_dport
(tcp_dport),
INDEX tcp_flags
(tcp_flags));
# All of the fields of a udp header
CREATE TABLE udphdr( sid INT UNSIGNED
NOT NULL,
cid INT UNSIGNED
NOT NULL,
udp_sport SMALLINT UNSIGNED
NOT NULL,
udp_dport SMALLINT UNSIGNED
NOT NULL,
udp_len SMALLINT UNSIGNED,
udp_csum SMALLINT UNSIGNED,
PRIMARY KEY (sid,cid),
INDEX udp_sport
(udp_sport),
INDEX udp_dport
(udp_dport));
# All of the fields of an icmp header
CREATE TABLE icmphdr( sid INT UNSIGNED
NOT NULL,
cid INT UNSIGNED
NOT NULL,
icmp_type TINYINT UNSIGNED
NOT NULL,
icmp_code TINYINT UNSIGNED
NOT NULL,
icmp_csum SMALLINT UNSIGNED,
icmp_id SMALLINT UNSIGNED,
icmp_seq SMALLINT UNSIGNED,
PRIMARY KEY (sid,cid),
INDEX icmp_type
(icmp_type));
# Protocol options
CREATE TABLE opt ( sid INT UNSIGNED
NOT NULL,
cid INT UNSIGNED
NOT NULL,
optid INT UNSIGNED
NOT NULL,
opt_proto TINYINT UNSIGNED
NOT NULL,
opt_code TINYINT UNSIGNED
NOT NULL,
opt_len SMALLINT,
opt_data TEXT,
PRIMARY KEY (sid,cid,optid));
# Packet payload
CREATE TABLE data ( sid INT UNSIGNED
NOT NULL,
cid INT UNSIGNED
NOT NULL,
data_payload TEXT,
PRIMARY KEY (sid,cid));
# encoding is a lookup table for storing encoding
types
CREATE TABLE encoding(encoding_type TINYINT UNSIGNED
NOT NULL,
encoding_text TEXT NOT NULL,
PRIMARY KEY (encoding_type));
INSERT INTO encoding (encoding_type, encoding_text)
VALUES (0, 'hex');
INSERT INTO encoding (encoding_type, encoding_text)
VALUES (1, 'base64');
INSERT INTO encoding (encoding_type, encoding_text)
VALUES (2, 'ascii');
# detail is a lookup table for storing different
detail levels
CREATE TABLE detail (detail_type TINYINT UNSIGNED NOT
NULL,
detail_text TEXT NOT NULL,
PRIMARY KEY (detail_type));
INSERT INTO detail (detail_type, detail_text) VALUES
(0, 'fast');
INSERT INTO detail (detail_type, detail_text) VALUES
(1, 'full');
# be sure to also use the snortdb-extra tables if you
want
# mappings for tcp flags, protocols, and ports
=====
-----------------------------------------------------------
Know yourself and know your enemy and you will never fear defeat.
-----------------------------------------------------------
__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com
-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- create-mysql error twig les (Feb 04)
- Re: create-mysql error Bamm Visscher (Feb 04)
- Re: create-mysql error twig les (Feb 04)
- Re: create-mysql error Chris Green (Feb 04)
- Re: create-mysql error twig les (Feb 04)
- Re: create-mysql error Bamm Visscher (Feb 04)
