Snort mailing list archives
Re: Anyone using "Enterprise implementation"?
From: Jason Haar <Jason.Haar () trimble co nz>
Date: Mon, 1 Sep 2003 16:27:30 +1200
On Wed, Aug 27, 2003 at 04:24:59PM +0200, Tom Van Overbeke wrote:
Wasn't one of the weaknesses of mysql that you can't do a rollback of a transaction ? once you change a record, there's no way to go back.
Yup - but no longer true. Modern MySQL allows you to choose the backend DB type - different SQL features for different backend choices. However, I think when using a SQL DB backend for something like an IDS, removing rollback functionality and gaining performance is absolutely A Good Thing. My problem appears to be that ACID (or the Snort schema) just bangs the hell out of the SQL backend - even with <1 million records... Hence my questions about what else I could do to improve the performance of ACID (e.g. more indices, different memory settings for MySQL) -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: Anyone using "Enterprise implementation"?, (continued)
- Re: Anyone using "Enterprise implementation"? Jason Haar (Aug 26)
- Re: Anyone using "Enterprise implementation"? Herve Debar (Aug 27)
- Re: Anyone using "Enterprise implementation"? Emre Bastuz (Aug 27)
- Re: Anyone using "Enterprise implementation"? Nagesh Chavan (Aug 28)
- RE: Anyone using "Enterprise implementation"? Hutchinson, Andrew (Aug 26)
- RE: Anyone using "Enterprise implementation"? Kreimendahl, Chad J (Aug 26)
- RE: Anyone using "Enterprise implementation"? Michael Steele (Aug 26)
- Re: Anyone using "Enterprise implementation"? cc (Aug 26)
- Re: Anyone using "Enterprise implementation"? Rich Adamson (Aug 27)
- RE: Anyone using "Enterprise implementation"? Tom Van Overbeke (Aug 27)
- Re: Anyone using "Enterprise implementation"? Jason Haar (Aug 31)