RE: [Snort-users] Are there known bugs in the odbc output plugin WRT FreeTDS and unixODBC? (more debug info)

Well, I've got another update, but I'm seriously finding moss on both sides=
of the trees now...

I tried configuring freeTDS to use different versions of the TDS protocol. =
No difference with 7.0, but when I tried 4.2, it got past the point where i=
t was breaking. But then it ran smack into some other issue. Now I get the =
following snort error on startup (using any TDS protocol version):

Apr 29 09:11:18 aopsecurityserver snort: FATAL ERROR: database: The underly=
ing database has not been initialized correctly. This
version of Snort requires version 106 of the DB schema. Your DB =
doesn't appear to have any records in the 'schema
' table. Please re-run the appropriate DB creation script (e.g. c=
reate_mysql, create_postgresql, create_oracle,
create_mssql) located in the contrib\ directory. See t=
he database documentation for cursory details (doc/README
=2Edatabase). and the URL to the most recent database plugin docu=
mentation.
Apr 29 09:11:18 aopsecurityserver kernel: device eth0 left promiscuous mode


Mind you, the database is, in fact, correctly configured, as I can tell fro=
m the Windows side. However when I try to run 'SELECT vseq from schema' in =
isql, I get the following error:

SQL> select vseq from schema
[][unixODBC][FreeTDS][SQL Server]Statement(s) could not be prepared.
[][unixODBC][FreeTDS][SQL Server]Incorrect syntax near the keyword 'schema'=
=2E
[ISQL]ERROR: Could not SQLExecute

But if I do 'SELECT vseq from "schema"', it works fine... But only under TD=
S versions 7.0 or 8.0... Under 4.2, I get:

SQL> select vseq from "schema"
[37000][unixODBC][FreeTDS][SQL Server]Line 1: Incorrect syntax near 'schema=
'.
[ISQL]ERROR: Could not SQLExecute

Does anybody know if this is relevant to the problem?

Thanks
John
---------------------------------------------------------------------------=
---------------------
This message is for the designated recipient only and may
contain privileged, proprietary, or otherwise private information. =20
If you have received it in error, please notify the sender
immediately and delete the original. Any unauthorized use of
this email is prohibited.
---------------------------------------------------------------------------=
---------------------
[mf2]


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users