Stuff

select a.* from snort.acid_event a,snort.acid_event b where a.timestamp>='2011-06-08 00:00:00' and a.timestamp>=b.timestamp and a.sid!=b.sid and a.plugin_id=b.plugin_id and a.plugin_sid=b.plugin_sid and (UNIX_TIMESTAMP(a.timestamp)-UNIX_TIMESTAMP(b.timestamp))<=2;