Snort mailing list archives
Re: BASE performance
From: Joel Esler <joel.esler () rcert-s army mil>
Date: Tue, 22 Feb 2005 10:19:28 -0500
ALL, This is in the "feature requests" It's currently being built. It will auto cache all the information in the background before you load the page, that way all the lag will be generated from the db. J On Tue, 2005-02-22 at 10:13 -0500, Wes Young wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just a comment: What about adding a perl script like aaval uses to do all that in the background when the cpu util is low... let it generate all the hostnames and populate the tables etc in the background as the information is recieved into the snort db? Willy, Andrew wrote: | Gentlemen, | | Thank you for your replies. It turns out my IDS config is to blame, and | address resolution (unableto+waitingfortimeout) was leading to the | delay/lag. | | For the record, if for some reason you'd like to turn address resolution | off, Kevin Johnson advises: "In your base_conf.php file I would recommend | changing $resolve_IP to equal 0 and try again." | | Regards, | | Andrew | | | -----Original Message----- | From: Michael Steele [mailto:michaels () winsnort com] | Sent: Monday, February 21, 2005 7:19 PM | To: snort-users () lists sourceforge net | Subject: RE: [Snort-users] BASE performance | | | Can you tell us what optimizing the MySQL database might be, and the | procedure? | | I do understand that when the alerts are deleted, at least with ACID there | are some remains of the alerts left behind. Can these be cleaned, and if so, | how? | | Kindest regards, | Michael... | | WINSNORT.com Management Team Member - -- Wes Young Network Security Analyst University at Buffalo GPG Key: http://saxjazman9-security.blogspot.com/2005/01/gpg-key.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFCG0wV1M5o0FsrrbERAk8wAJ9DOR/MQFdFL/7rR+EoTu60Eki61gCdEg9x Ct2+QKNGO69+2PBr376G8ig= =T9Zn -----END PGP SIGNATURE----- ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Joel Esler <joel.esler () rcert-s army mil>
Current thread:
- BASE performance Willy, Andrew (Feb 21)
- Re: BASE performance Michael Stone (Feb 21)
- RE: BASE performance Michael Steele (Feb 21)
- <Possible follow-ups>
- RE: BASE performance Willy, Andrew (Feb 22)
- Re: BASE performance Wes Young (Feb 22)
- Re: BASE performance Joel Esler (Feb 22)
- Re: BASE performance Wes Young (Feb 22)
- Re: BASE performance Michael Stone (Feb 21)