Hallo erstam hier im forum... Find diese Forum klasse und möchte gleich mal mit meinem ersten Problem durchstraten.
Auf machen "links" die Acid anbietet, bekomme ich folgenden fehler :
Database ERROR:Database ERROR:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-50, 50' at line 1
Acid und Snort tauschen ihre Infos über Mysql aus.
Ich benutze Linux Debian Sarge 2.8.3-686
Mysq 4l
php4
ACID / snort / Mysql Problem
Hier nochmal ne detailliertere DEBUG Ausgabe vom script
mysql): SELECT vseq FROM schema
(mysql): SELECT sid FROM sensor
(mysql): SELECT MAX(cid) FROM event WHERE sid='1'
(mysql): SELECT MAX(cid) FROM acid_event WHERE sid='1'
(mysql): SELECT MAX(cid) FROM event WHERE sid='2'
(mysql): SELECT MAX(cid) FROM acid_event WHERE sid='2'
Added 0 alert(s) to the Alert cache
(mysql): SELECT acid_event.sid, acid_event.cid, signature, timestamp, acid_event.ip_src, acid_event.ip_dst, acid_event.ip_proto FROM acid_event WHERE (sig_name LIKE '%sppportscan%') LIMIT -50, 50
1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-50, 50' at line 1
adodb_mysql._execute(SELECT acid_event.sid, acid_event.cid, signature, timestamp, aci..., false) % line 826, file: adodb.inc.php
adodb_mysql.execute(SELECT acid_event.sid, acid_event.cid, signature, timestamp, aci...) % line 212, file: acid_db.inc
acidcon.acidexecute(SELECT acid_event.sid, acid_event.cid, signature, timestamp, aci..., -50, 50) % line 198, file: acid_state_query.inc
querystate.executeoutputquery(SELECT acid_event.sid, acid_event.cid, signature, timestamp, aci..., Object:acidcon) % line 86, file: acid_qry_sqlcalls.php
include(/usr/share/acidlab/acid_qry_sqlcalls.php) % line 174, file: acid_qry_main.php
Database ERROR:Database ERROR:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-50, 50' at line 1
(mysql): SELECT sid FROM sensor
(mysql): SELECT MAX(cid) FROM event WHERE sid='1'
(mysql): SELECT MAX(cid) FROM acid_event WHERE sid='1'
(mysql): SELECT MAX(cid) FROM event WHERE sid='2'
(mysql): SELECT MAX(cid) FROM acid_event WHERE sid='2'
Added 0 alert(s) to the Alert cache
(mysql): SELECT acid_event.sid, acid_event.cid, signature, timestamp, acid_event.ip_src, acid_event.ip_dst, acid_event.ip_proto FROM acid_event WHERE (sig_name LIKE '%sppportscan%') LIMIT -50, 50
1064: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-50, 50' at line 1
adodb_mysql._execute(SELECT acid_event.sid, acid_event.cid, signature, timestamp, aci..., false) % line 826, file: adodb.inc.php
adodb_mysql.execute(SELECT acid_event.sid, acid_event.cid, signature, timestamp, aci...) % line 212, file: acid_db.inc
acidcon.acidexecute(SELECT acid_event.sid, acid_event.cid, signature, timestamp, aci..., -50, 50) % line 198, file: acid_state_query.inc
querystate.executeoutputquery(SELECT acid_event.sid, acid_event.cid, signature, timestamp, aci..., Object:acidcon) % line 86, file: acid_qry_sqlcalls.php
include(/usr/share/acidlab/acid_qry_sqlcalls.php) % line 174, file: acid_qry_main.php
Database ERROR:Database ERROR:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-50, 50' at line 1
ASO, noch etwas
Ich glaube der Entscheidende Faktor ist hier ADODB !!!!
Kennt sich damit niemand aus ???
Kennt sich damit niemand aus ???