Snort mailing list archives

RE: Snort Speed


From: Ju Kong Fui <kongfui () TP EDU SG>
Date: Fri, 30 Nov 2001 09:09:45 +0800

I use hdparm of linux to optimize IDE performance.
I also optimize parameters to allocate more memory to the sorting and
searching process of MySQL <-- included in MySQL documentation.

-----Original Message-----
From: Mike Walter [mailto:mike () pcdnet net] 
Sent: Thursday, November 29, 2001 9:11 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort Speed


Hello,
        Yet another question about Snort and Speed.  I am now running Snort
on a Dual PIII 1.13 Ghz system with 256 MB of ram and a pair of 40 GB ATA
100 drive mirrored with a hardware controller.  I am using this system as a
test to see if it runs quicker.  The main page seems to open quicker, but
when I do queries like list by source IP and then sort by number of
occurrences, it still takes a long time to bring this up.  Now I know that
IDE drives are not the 100% best to use in server type applications, but I
was wondering if anyone has any ideas.  I am running snort 1.8.2, Acid
v0.9.6b18, and ADODB 1.54.  I currently have 31,336 alerts in the database.
Any thoughts?
        Thanks,

Mike Walter,
3z.net a PCD Company,
PCD Network Solutions, Inc,
"When Success the Only Solution  t h i n K  3z.net" www.pcdnet.net
www.3z.net




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: