Snort mailing list archives

Re: Anyone using "Enterprise implementation"?


From: Jason Haar <Jason.Haar () trimble co nz>
Date: Mon, 1 Sep 2003 16:27:30 +1200

On Wed, Aug 27, 2003 at 04:24:59PM +0200, Tom Van Overbeke wrote:
Wasn't one of the weaknesses of mysql that you can't do a rollback of a
transaction ? once you change a record, there's no way to go back.

Yup - but no longer true. Modern MySQL allows you to choose the backend DB
type - different SQL features for different backend choices.

However, I think when using a SQL DB backend for something like an IDS,
removing rollback functionality and gaining performance is absolutely A Good
Thing. My problem appears to be that ACID (or the Snort schema) just bangs
the hell out of the SQL backend - even with <1 million records... Hence my
questions about what else I could do to improve the performance of ACID
(e.g. more indices, different memory settings for MySQL)

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: