[Snort-users] Oracle output

We have discovered a problem with the Oracle output processor when
encoding is ASCII. (We have not tried hex)

However, in the oracle database since the data_payload is stored as a
"BLOB" the following change must be made.

# diff spo_database2.c spo_database.c
1612c1612
< "VALUES ('%u','%u','%s",
---
> "VALUES
('%u','%u',utl_raw.cast_to_raw('%s",
1616c1616
< strcat(query->val, "')");
---
> strcat(query->val, "'))");

We have discovered a lot of other problems too when two Snort boxes log
to the same DB. We're working this issue out. More to follow
(hopefully)

Joel Esler, GCIA


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users