Snort mailing list archives

Re: IP Header Data Type Preference


From: Brian <bmc () snort org>
Date: Fri, 16 May 2003 18:58:56 -0400

On Fri, May 16, 2003 at 03:32:24PM -0400, David Markle wrote:
I need some advice on IP Header Data types with a database, say MySQL.  The
MySQL snort database defines IP address information as INT (integer) (i.e.
ip_src/ip_dst in the iphdr table).  Is there a computational benefit to this
within the database or does it really matter.

It is *MUCH* more efficient to store it as an integer than as a text
string.  It is the only way to properly handle IP addresses in a
database.  How else will you do range or subnet queries?

-brian


-------------------------------------------------------
This SF.net email is sponsored by: If flattening out C++ or Java
code to make your application fit in a relational database is painful, 
don't do it! Check out ObjectStore. Now part of Progress Software.
http://www.objectstore.net/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: