Snort mailing list archives

RE: snortreport -- SLOOOW -- ACID, NOT!


From: Jacob Killian <jacob () pgtc com>
Date: Fri, 31 Aug 2001 09:04:43 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

250,000 alerts from two days, not two weeks.  I'll let you know the end of 
next week what I'm up to.

Acid is MUCH better.  snort-report just doesn't have to optimization to 
handle a high load yet.

Thanks for everyone's help!

Jacob

?-----Original Message-----
From: Kevin Brown <Kevin.M.Brown () asu edu>
Subject: RE: [Snort-users] snortreport -- SLOOOW
To:
Cc: snort-users () lists sourceforge net

Wow, only 250,000 alerts? ?I have logged close to 2.2 Million in the last
two weeks. ?Of course this box is monitoring 2 Class B's sitting on a total
of 200Mb of bandwidth. ?With ACID it takes in excess of a minute per page to
load coming from a Quad PII450 Xeon with 2GB RAM (this isn't the snort
machine, just the SQL server, heheh).
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7j5l/VNUHoXz2/TkRAumfAJ9exRM6THqijKtBS9wGuvbWYSNl9QCfRucY
ozJnTzyaSg71dMz3sSGmZdU=
=0vLl
-----END PGP SIGNATURE-----

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: