Snort mailing list archives

RE: ACID/MySql DB performance


From: "larosa, vjay" <larosa_vjay () emc com>
Date: Fri, 14 Feb 2003 10:55:44 -0500

FYI,

I am holding 5 Million events in my database and it runs very
well. Here is my configuration.

Sorftware:
Demarc 1.6 Professional Edition
Mysql 3.23.42
Solaris 8

Database Hardware:
Fujitsu M400 (quad 600 MHZ CPU's with 6GB of RAM).
Sun Gigabit Ethernet adaptor.
2 LP8000 Fiber Channel adaptors using EMC PowerPath.
125 GB of EMC Symmetrix Storage.

vjl





-----Original Message-----
From: McPheeters, Scott [mailto:smcpheeters () fnms-indy com]
Sent: Friday, February 14, 2003 9:44 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] ACID/MySql DB performance


I am seeing a lot of messages about mySql DB performance.  I am curious what
the general consciences is about how many alerts are in your database?

I normally see a pretty big performance change around 100k alerts, at that
point the "snap" is gone and the system has to think about each page. I am
still working on my rules, does it ever end? hehe, so I can run anywhere
between 50k and 300k.

How many alerts do you try to keep your databases at?  
When do you start feeling the performance differences??


ps. my db server is quad xeon 500, 2gig ram, lots of disk.  I have done the
extra indexes and I check the tables for optimizations.

Scott


-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: