Thank you for your answer but it isn't not answer I expected. Example: I 
need about 1000 - 10.000 query (or 1000 - 10.000 lines in general_log_file 
in mysql or 1GB redo-log include dictionary logminer) as:

"insert into A values ('a', 'b', ...)" //normal query
"insert into A values ('b', 'b', ...)" //normal query
...
"insert into A values('z', 'z',...)"// abnormal query
...

It means I need source data (sample, not source code) for machine learning.

Vào 19:20:08 UTC+7 Thứ Năm, ngày 28 tháng 5 năm 2015, Ryan Schulze đã viết:
>
> The files you are looking for are in the os_dbd module 
> https://github.com/ossec/ossec-hids/tree/master/src/os_dbd (server.c, 
> alert.c, rules.c)
>
>  
>
> On 2015-05-28 13:24, Kiến Thức Phan wrote:
>
> Hi all,
>
> I am vietnamese student and researching OSSEC for database server (mysql, 
> oracle). I use logminer for analyze log oracle (redo-log) and use 
> lib_mysqludf_log for analyze mysql log. I have a problems as I don't have 
> sql query source (about 1000 - 10.000 queries both normal query and 
> abnormal query) to write rules or build machine learning system. Where can 
> I find sql query source? 
>
> I'm sorry, maybe my english is not good and Thanks for any hints!
>
>  
> -- 
>
> --- 
> You received this message because you are subscribed to the Google Groups 
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected] <javascript:>.
> For more options, visit https://groups.google.com/d/optout.
>
>  
>  
>  

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to