From owner-freebsd-questions@FreeBSD.ORG Sat Jan 1 00:50:17 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 35BCC16A4CE for ; Sat, 1 Jan 2005 00:50:17 +0000 (GMT) Received: from smtp1.bahnhof.se (smtp1.bahnhof.se [213.80.101.25]) by mx1.FreeBSD.org (Postfix) with ESMTP id D3E3B43D45 for ; Sat, 1 Jan 2005 00:50:13 +0000 (GMT) (envelope-from mattias.bjork@sydnet.net) Received: from mfilter1.bahnhof.se (mail.bahnhof.se [213.136.33.1]) by smtp1.bahnhof.se (Postfix) with ESMTP id 076051F7F7A for ; Sat, 1 Jan 2005 01:50:15 +0100 (CET) Received: from localhost (localhost.localdomain [127.0.0.1]) by re-injector1.bahnhof.se (Postfix) with ESMTP id 3BF14129147 for ; Sat, 1 Jan 2005 01:50:12 +0100 (CET) Received: from smtp4.bahnhof.se ([213.136.33.1]) by localhost (mfilter1.bahnhof.se [10.0.1.21]) (amavisd-new, port 10024) with ESMTP id 01199-07 for ; Sat, 1 Jan 2005 01:50:11 +0100 (CET) Received: from mail-gw.globecom.net (mail-gw-gc.bahnhof.net [213.80.101.101]) by smtp4.bahnhof.se (Postfix) with ESMTP id 089F012E389 for ; Sat, 1 Jan 2005 01:50:10 +0100 (CET) Received: from setiathome.birch.se (unknown [212.116.92.111]) by mail-gw.globecom.net (Postfix) with SMTP id 72A9E382428 for ; Sat, 1 Jan 2005 01:53:10 +0100 (CET) Received: (qmail 20711 invoked from network); 1 Jan 2005 00:50:04 -0000 Received: from unknown (HELO ?192.168.10.201?) (192.168.10.201) by ns.birch.se with SMTP; 1 Jan 2005 00:50:04 -0000 Message-ID: <41D5F3BE.9070306@sydnet.net> Date: Sat, 01 Jan 2005 01:50:06 +0100 From: =?ISO-8859-1?Q?Mattias_Bj=F6rk?= User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: sv, en-us, en MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Virus-Scanned: by amavisd-new at bahnhof.se Subject: Re: Problems with MySQL and SNORT after Reboot X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Jan 2005 00:50:17 -0000 Hi, Thanks for the fast response. I did run "REPAIR TABLE event" from phpmyadmin and there where no problems with that. No Error here. But when I point my browser to my snort page and select the timeframe for the alerts to all I get the error message after a few seconds: Warning: mysql_query(): Unable to save result set in /usr/local/www/snortreport/DB_mysql.php on line 38 Got error 127 from table handler However if i select a day as a time frame it works and I can select up to forteen days. If i select thirty days or every thing logged I get the error above. From phpmyadmin if I select the database named "snort" and I click on the table "event" i get an warning/error message that are as following: "More than one INDEX key was created for column `timestamp`" Is that anything serious? So I hope I have described enought to make any conclutions about this. I have also restared both mysql and snort but that does not help either. Thanks in advance and a happy new year! Dear list, > > After a power failure and my computers went down, I have been starting > to get error messages in sys log and on the console: > > Dec 28 19:50:52 setiathome snort: database: mysql_error: Can't open > file: 'event.MYI'. (errno: 145) SQL=INSERT INTO event > (sid,cid,signature,timestamp) VALUES ('1', '10', '4', '2004-12-28 > 19:50:52.597+001') > > Im not an expert on SQL and database servers etc and have followed this > guide to make snort work with MySQL: > > http://bsdguides.org/guides/freebsd/security/snortreport.php > > I didn't find that too hard and it worked when I did it some months ago. > But now after the reboot/restart of the system, the fault that I > described abow have arised. I have had similar power failures before and > that did not create this problem. > > And I have checked in /var/db/mysql/snort after the file event.MYI and > its there: > > setiathome/var/db/mysql/snort# ls -l event.* 9:35PM > -rw-rw---- 1 mysql mysql 560343 Dec 28 13:27 event.MYD > -rw-rw---- 1 mysql mysql 1786880 Dec 28 16:38 event.MYI > -rw-rw---- 1 mysql mysql 8642 Nov 13 18:29 event.frm > setiathome/var/db/mysql/snort# > > So Im clueless to what could be causing the problem that I have. Perhaps > its the wrong list to send this mail. But I thought that its the closest > that I could think off. > > Best regards Mattias Björk > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > Best regards Mattias Björk