Using ACID

201

6.3.8

ACID Tables

When you start using ACID for the first time, it creates its own tables in the

Snort database. These tables are used for housekeeping functions of ACID. For exam 

ple, you can create new alert groups called (AG) in ACID and ACID keeps a record in

its own tables. This section shows a list of MySQL database tables before and after

configuring ACID. The following is a list of tables as they appear before using ACID

for the first time.

mysql> 

show tables;

+                  +

| Tables_in_snort  |

+                  +

| data             |

| detail           |

| encoding         |

| event            |

| flags            |

| icmphdr          |

| iphdr            |

| opt              |

| protocols        |

| reference        |

| reference_system |

| schema           |

| sensor           |

| services         |

| sig_class        |

| sig_reference    |

| signature        |

| tcphdr           |

| udphdr           |

+                  +

19 rows in set (0.01 sec)

mysql>

The following is a list of tables after the creation of ACID tables in the database.

The user name that was used for ACID must have permission to create new tables.

Refer to Chapter 5 for information about granting permissions.