Snort Installation Manual Snort, MySQL and ACID on Redhat 7.3

Short Description
The purpose of this guide is to document the installation and configuration of a complete Snort implementation. This guide contains all the necessary information for installing and understanding the architectural layout of the implementation.
The information in this guide was written for implementing Snort 1.8 using Redhat 7.3. You may find some discrepancies if you are installing different versions of Snort or using different versions of Redhat.

Website: www.snort.org | Filesize: 1962kb
No of Page(s): 35

Content
…
Go into ACID and delete all the events associate with that sensor. This may take a while depending on the number of events to be deleted and the type of hardware your running the database on. Be patient, your browser may even time out while waiting for it to finish. Use top to watch the mysqld service. When I was testing on a slow box, I had to go in multiple times and keep deleting the events. I had upwards of 60000 events and multiple sensors. I also had to keep exiting the sensor screen and then re entering it to make the deletes work because It kept giving me an “unsuccessful delete”.
Next remove the sensor completely from the database. This will correct the sensor count on the main ACID web page.
…

Get the file Download here