[Snort-users] acid/base recovery

permalink · #1 (**permalink**) 06-06-2005

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C56AB2.93842A84
Content-Type: text/plain

Hello All,

I had the unfortunate happen and lost a raid array that housed all of my
alert data for BASE. I'm in the midst of recovering and it looks like that
the sql files in the BASE tar file are not the only one(s) needed to rebuild
the database. Is acid's original sql table setup required as well? Base is
erroring with:

Database ERROR: Table 'snort.iphdr' doesn't exist

It does not exist after I've run:

Mysql -u (user) -p -D snort < create_base_tbls_mysql.sql

The tables have been created and this is what I have in my
/usr/lib/mysql/snort directory:

acid_ag_alert.frm

acid_ag.frm acid

event.frm

acid_ip_cache.frm

base_roles.frm

base_users.frm

acid_ag_alert.MYD

acid_ag.MYD acid_event.MYD

acid_ip_cache.MYD

base_roles.MYD

base_users.MYD

acid_ag_alert.MYI

acid_ag.MYI

acid_event.MYI

acid_ip_cache.MYI

base_roles.MYI

base_users.MYI

Thanks in advance!

------_=_NextPart_001_01C56AB2.93842A84
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">

<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
<style>

</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

Hello All,<o:p></o:p>

<o:p> </o:p>

I had the unfortunate happen and lost a raid array =
that
housed all of my alert data for BASE.  I'm in the midst of
recovering and it looks like that the sql files in the BASE tar file =
are not
the only one(s) needed to rebuild the database.  Is acid's =
original
sql table setup required as well?  Base is erroring =
with:<o:p></o:p>

<o:p> </o:p>

Database ERROR: Table 'snort.iphdr' doesn't
exist<o:p></o:p>

<o:p> </o:p>

It does not exist after I've =
run:<o:p></o:p>

<o:p> </o:p>

Mysql -u (user) -p -D snort < =
create_base_tbls_mysql.sql<o:p></o:p>

<o:p> </o:p>

The tables have been created and this is what I have =
in my
/usr/lib/mysql/snort directory:<o:p></o:p>

<o:p> </o:p>

<o:p> </o:p>

<o:p> </o:p>

<o:p> </o:p>

<o:p> </o:p>

acid_ag_alert.frm <o:p></o:p>

acid_ag.frm  acid<o:p></o:p>

event.frm <o:p></o:p>

acid_ip_cache.frm <o:p></o:p>

base_roles.frm <o:p></o:p>

base_users.frm<o:p></o:p>

acid_ag_alert.MYD<o:p></o:p>

acid_ag.MYD  =
acid_event.MYD<o:p></o:p>

acid_ip_cache.MYD<o:p></o:p>

base_roles.MYD<o:p></o:p>

base_users.MYD<o:p></o:p>

acid_ag_alert.MYI<o:p></o:p>

acid_ag.MYI<o:p></o:p>

acid_event.MYI<o:p></o:p>

acid_ip_cache.MYI<o:p></o:p>

base_roles.MYI<o:p></o:p>

base_users.MYI<o:p></o:p>

<o:p> </o:p>

Thanks in advance!<o:p></o:p>

<o:p> </o:p>

</div>

</body>

</html>

------_=_NextPart_001_01C56AB2.93842A84--

-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games. How far can you shotput
a projector? How fast can you ride your desk chair down the office luge track?
If you want to score the big prize, get to know the little guy.
Play to win an NEC 61" plasma display: http://www.necitguy.com/?r=20
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode