Snort mailing list archives

Re: Acid and Mysql with Snort


From: twig les <twigles () yahoo com>
Date: Thu, 11 Jul 2002 14:47:24 -0700 (PDT)

What OS?  I found this little gem on mysql's site but
I doubt it applies to any other OS than FreeBSD:

FreeBSD Forums <info () freebsdforums org>: On high
volume servers using MySQL with FreeBSD it is also
recommended increasing MAXUSERS (i.e. basically
recompiling/rebuilding your kernel). FreeBSD Forums


--- "Hall, Duane" <Duane.Hall () hastings-ent com> wrote:
I have a speed issue with ACID.  To give a little
background:  I was using snort to capture packets
for the Internet team to help diagnose an issue. 
The only problem is they started stress testing
without telling me.  So between 8:00am and lunch,
snort and Mysql logged about 2.5 million of these
packets.  I am proud to say it didn't loose a single
packet.  Now my problem.  Mysql and ACID are slow. 
It takes upwards of 2 - 5 minutes to run a query. 
Are there any performance tuning scripts available
for Mysql and the snort database. For now these
logged packets aren't needed, so I am removing them
from the database.  My question is what If the
database ever has this issue again.  

Duane
  
Duane Hall
Security Administrator
Hastings Entertainment


-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GIT d+ s:- a- C+ UL++ P+ L++ E--- W++ N++ o K- w--- 
O- M-- V-- PS PE Y PGP t++ 5 X R- tv+ b+ DI++ D+ 
G e+ h---- r+++ y++++ 
------END GEEK CODE BLOCK------



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
PC Mods, Computing goodies, cases & more
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or
unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:

http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
All warfare is based on deception.
-----------------------------------------------------------

__________________________________________________
Do You Yahoo!?
Sign up for SBC Yahoo! Dial - First Month Free
http://sbc.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
PC Mods, Computing goodies, cases & more
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: