Snort mailing list archives
RE: Problem with MYSQL/ACID And Large Database
From: Paul Schmehl <pauls () utdallas edu>
Date: 03 Mar 2003 12:42:22 -0600
On Mon, 2003-03-03 at 09:28, Pacheco, Michael F. wrote:
Of course this is workstation related, if your carrying 30k plus alerts in your MySQL db instance then you really need to set up an archive instance off the primary db server - but that's a different story.
Seriously? 30k? I keep about 300,000 events in the acid_events table and performance is fine. When it got over 1,000,000, *then* it was unacceptably slow, but 300,000 is no problem at all. I think this number depends on the hardware you're running on and how well you've set things up. -- Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer The University of Texas at Dallas http://www.utdallas.edu/~pauls/ AVIEN Founding Member ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Problem with MYSQL/ACID And Large Database Maynard, Jeff S. (Mar 03)
- <Possible follow-ups>
- RE: Problem with MYSQL/ACID And Large Database Maynard, Jeff S. (Mar 03)
- RE: Problem with MYSQL/ACID And Large Database Pacheco, Michael F. (Mar 03)
- RE: Problem with MYSQL/ACID And Large Database Paul Schmehl (Mar 03)
- Re: Problem with MYSQL/ACID And Large Database Kenneth G. Arnold (Mar 03)
- RE: Problem with MYSQL/ACID And Large Database Pacheco, Michael F. (Mar 03)
- RE: Problem with MYSQL/ACID And Large Database Pacheco, Michael F. (Mar 03)
- RE: Problem with MYSQL/ACID And Large Database Maynard, Jeff S. (Mar 03)