On 4/17/06, Richard Compton < richard.compton@gmail.com> wrote:

I have scripts that are querying the acid_event table in my Snort database and sometime they work (when I'm in the office and using BASE) and sometimes they don't work (like on the weekends). Any idea why this would be and what I can do to make these queries work every time? I think that the acid_event database is some sort of cache database but I'm not sure.

Hi Rich

Maybe you've setup you're BASE in order to "auto-update" alerts when browsing it (it means that new alerts will be added when someone use base).
So, that's why during week days - when you use BASE front-end - your scripts work fine, and during week-end - when nobody use BASE - they don't.
If I am correct, then you could use a cron job to automatically update BASE database contents (or at least load BASE before launching them...).

Best regards,