shows that mysql client will read commands from this file.

To display what tables have been created, use the following session:

[root@laptop]# mysql  h localhost  u rr  p snort 

Enter password: 

Reading table information for completion of table and column 

names

You can turn off this feature to get a quicker startup with  A

Welcome to the MySQL monitor.  Commands end with ; or \g.

Your MySQL connection id is 46 to server version: 3.23.36

Type  help;  or  \h  for help. Type  \c  to clear the buffer

mysql> show tables;

+                  +

| Tables_in_snort  |

+                  +

| data             |

| detail           |

| encoding         |

| event            |

| icmphdr          |

| iphdr            |

| opt              |

| reference        |

| reference_system |

| schema           |

| sensor           |

| sig_class        |

| sig_reference    |

| signature        |

| tcphdr           |

| udphdr           |

+                  +

16 rows in set (0.00 sec)

mysql> 

The  show tables  command lists all the tables in the currently open database.

There are sixteen tables created in the table by the create_mysql script as listed

above. The first table name in the list is data and the last one in the list is udphdr.

Each of these tables keeps part of the information about Snort activity.