Purging Your Snort Database
By Daniel Miessler on July 20th, 2009: Tagged as Information Security
A simple (yet barbaric) way to clean up a Snort database.
[bash]mysql -u $user use snort; DELETE FROM sensor; DELETE FROM event; DELETE FROM iphdr; DELETE FROM tcphdr; DELETE FROM udphdr; DELETE FROM icmphdr; DELETE FROM data; DELETE FROM opt; DELETE FROM signature; DELETE FROM sig_class; DELETE FROM sig_reference; DELETE FROM reference; DELETE FROM reference_system;[/bash]