RE: optimize MYSQL + ACID

["Hutchinson, Andrew" <Andrew.Hutchinson () Vanderbilt edu>]

As an additional followup note:

If you create a compound index in MySQL (like acid_ag_alert.ag_sid +
acid_ag_alert.ag_cid), be certain that you query IN THAT ORDER if you
wish to take advantage of the index.  The MySQL optimizer will not
recognize that you intend to use a compound index if you reverse the
order, and you'll be sequential scanning until the cows come home.

Andrew

Andrew Hutchinson
Vanderbilt University Medical Center
Informatics / NCS / Network Security
(615) 936-2856

-----Original Message-----
From: Pete Davis [mailto:peted () springisd org] 
Sent: Friday, February 21, 2003 1:26 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] optimize MYSQL + ACID


** High Priority **

I have seen a lot of traffic on this mailing list about creating
additional indexes to speed up ACID et. al.  The problem is I cannot
find out what syntax to use to create the indexes.

I know about the need to create an index for tcphdr.tcp_sport,
tcphdr.tcp_dport and acid_ag_alert.ag_sid + acid_ag_alert.ag_cid.   What
is the command line to do it?  I have looked on the internet (mysql.com
mostly) but I don't know the full command to get it done.  I know to do
it from mysql executable to start with but what are the actual commands
to type within mysql to get it done?  

Any help would be appreciated.
 


-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge. The
most comprehensive and flexible code editor you can use. Code faster.
C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users