Snort mailing list archives

Re: Database datetime settings


From: Nigel Houghton <nhoughton () sourcefire com>
Date: Wed, 23 Sep 2009 14:54:43 -0400

On Wed, Sep 23, 2009 at 2:26 PM, Alexander Novokhatsky
<alex.ontario () gmail com> wrote:
Hello Nigel,

Thank you so much for your reply.
Yes, you're right it's BASE. I'm trying to figure out how to do it.
Here is the example:

$sql2 = "SELECT signature, timestamp FROM acid_event WHERE sid='".$sid."' AND cid='".$cid."'";

Timestamp is the field with GMT time.
I need it to be EDT/EST. But I don't know how to get into
consideration daylight savings, because it won't be just simple as
timestamp-5
If you have ideas, I'd appreciate them.
Thank you!

Wednesday, September 23, 2009, 2:12:39 PM, you wrote:

On Wed, Sep 23, 2009 at 2:01 PM, Alexander Novokhatsky
<alex.ontario () gmail com> wrote:
Hello snort-users,

Snort is writing alerts to database in GMT timestamp. But I'd like it
to be GMT-5 (EST)
Is there any easy way to change it? Maybe to change MS SQL 2005 Server
settings or change field timestamp properties in database, or even
change the system time?
Because I don't see any possibilities to change time of the event during the
insertion or extracting from the database.

Thank you.

--
Best regards,
 Alexander                          mailto:alex.ontario () gmail com


------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



Modify your event viewer (BASE I assume?) to change the displayed date
to one that is acceptable.




--
Best regards,
 Alexander                            mailto:alex.ontario () gmail com



I'm not a PHP guy at all, but if it were me, I would look at where
BASE *displays* the timestamp to the user (not where it selects it
from the DB) and I would add a function that converts the GMT time
into localtime. I would guess that PHP has some inbuilt functionality
to help with that.

-- 
Nigel Houghton
Head Mentalist
SF VRT
http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: