RE: Acid time out errors with Win32

[bkippen () csw L-3com com]

Depends on how busy your snort box is and how many records in the database.
I'm running Win2K. It seems to be a bit slower at handling ACID. I've had to
set mine to 240 seconds to prevent timeouts.

Bryan

-----Original Message-----
From: Lists [mailto:lists () paladinss com]
Sent: Thursday, September 06, 2001 5:12 PM
To: 'Kresna Prawira'; snort-users () lists sourceforge net
Subject: RE: [Snort-users] Acid time out errors with Win32


Understand that, but it still seems like thirty seconds should be more
then enough time to do this.

Fast box with low traffic.

Ben

-----Original Message-----
From: Kresna Prawira [mailto:kprawira () esurance com] 
Sent: Thursday, September 06, 2001 3:59 PM
To: Lists Smith; snort-users () lists sourceforge net
Subject: RE: [Snort-users] Acid time out errors with Win32

Check you php.ini for timeout setting.

-----Original Message-----
From: Lists [mailto:lists () paladinss com]
Sent: Thursday, September 06, 2001 3:46 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Acid time out errors with Win32


I am getting timeouts on some queries with ACID.  Most of the time when
trying to retrieve the full packet alert, it times out with this error 

"Fatal error: Maximum execution time of 30 seconds exceeded in
C:\Inetpub\wwwroot\acid\acid_common.php on line 997"

I am getting this 4 times out of 5.

I am getting the same error, only less frequently, when I try to
retrieve a list of source IP addresses.

Running Snort 1.7 with MySQL for Win32, Snort Rules 1.7, WinPcap 2.1,
MySQL 3.23.39, PHP 4.0.6, ADODB 1.1.2 and ACID 0.9.6b6 on a W2K server
SP2.  

Low traffic network (generating about 10 alerts an hour) and hardware is
AMD Athlon 1000 with 384MB RAM.

Anybody have any suggestions?

I am preparing to upgrade to Snort 1.8.

Ben




 



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users