Date: Thu, 30 Dec 2004 19:09:09 -0500 (EST) From: Scott Kupferschmidt <sk@isprime.com> To: =?ISO-8859-1?Q?Mattias_Bj=F6rk?= <mattias.bjork@sydnet.net> Cc: freebsd-questions@freebsd.org Subject: Re: Problems with MySQL and SNORT after Reboot Message-ID: <Pine.BSF.4.21.0412301908450.25522-100000@lexus.isprime.com> In-Reply-To: <41D4952B.7030003@sydnet.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello,
You need to login to mysql command prompt and do a REPAIR TABLE event; in
that database, and it will clear it right up.
Sincerely,
Scott Kupferschmidt
ISPrime, Inc.
866.502.4678 ext. 3
AIM: Scott ISPrime - ICQ: 174337249
On Fri, 31 Dec 2004, [ISO-8859-1] Mattias Bj=F6rk wrote:
> Dear list,
>=20
> After a power failure and my computers went down, I have been starting=20
> to get error messages in sys log and on the console:
>=20
> Dec 28 19:50:52 setiathome snort: database: mysql_error: Can't open=20
> file: 'event.MYI'. (errno: 145) SQL=3DINSERT INTO event=20
> (sid,cid,signature,timestamp) VALUES ('1', '10', '4', '2004-12-28=20
> 19:50:52.597+001')
>=20
> Im not an expert on SQL and database servers etc and have followed this=
=20
> guide to make snort work with MySQL:
>=20
> http://bsdguides.org/guides/freebsd/security/snortreport.php
>=20
> I didn't find that too hard and it worked when I did it some months ago.=
=20
> But now after the reboot/restart of the system, the fault that I=20
> described abow have arised. I have had similar power failures before and=
=20
> that did not create this problem.
>=20
> And I have checked in /var/db/mysql/snort after the file event.MYI and=20
> its there:
>=20
> setiathome/var/db/mysql/snort# ls -l event.* 9:35PM
> -rw-rw---- 1 mysql mysql 560343 Dec 28 13:27 event.MYD
> -rw-rw---- 1 mysql mysql 1786880 Dec 28 16:38 event.MYI
> -rw-rw---- 1 mysql mysql 8642 Nov 13 18:29 event.frm
> setiathome/var/db/mysql/snort#
>=20
> So Im clueless to what could be causing the problem that I have. Perhaps=
=20
> its the wrong list to send this mail. But I thought that its the closest=
=20
> that I could think off.
>=20
> Best regards Mattias Bj=F6rk
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o=
rg"
>=20
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0412301908450.25522-100000>