Re: Question about best hardware

[Sigurd Urdahl <sigurdur () linpro no>]

"Kreimendahl, Chad J" <Chad.Kreimendahl () umb com> writes:

> Hardware won't be your problem.  Once you get around 100k events in the
> snortdb on MySQL you'll run into major performance problems that almost
> no amount of hardware seems to solve.   If you don't have issues
> relating to how long you legally have to keep that data, then I
> recommend purging what you can.

For what it's worth, default Mysql installs often use a config file
that is suitable for a box with very little RAM for Mysql. 

Jeremy Zawodny has written a nice article on Mysql tuning that might
be of general interest to this list:
        http://www.linux-mag.com/2001-12/mysql_01.html

regards,

-sig

-- 
Sigurd Urdahl                           sigurdur () linpro no
Systemkonsulent og sånt        Systems consultant and such
Linpro A/S                           http://www.linpro.no/


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users