Re: Snort drops packets with SQL logging.

[Brian <bmc () snort org>]

According to Thomas Novin:
> Any idea why snort/MySQL can't keep up with this configuration? The network 
> load is approx 20 Mbit (peaks 30).

Could it be that SQL is not designed for writing packets raw to disk?

Maybe.

Could it be that MySQL is slower than the traffic that you see on the
network?

Maybe.

Barnyard is your friend.  Learn to love it.

-- 
dolphins, the 'other' white meat

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users