Snort mailing list archives

RE: FW: Snort Acid/Base PHP 5 Windows question


From: "Gasper, Rick" <rjgasper () kings edu>
Date: Fri, 8 Oct 2004 22:47:35 -0400

Only about a day, but I would thing that server is getting hit pretty hard.

Total Events: 892544   Cached Events: 539261

CLIENT: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; brip1; SV1; .NET CLR 1.1.4322)
SERVER: Microsoft-IIS/6.0
SERVER HW: Windows NT SNORT 5.2 build 3790
PHP VERSION: 4.3.9
PHP API: isapi

This is monitoring 2 subnets from one of our dorms, a total of about 100 to 125 machines.

I am still turning rules off.

Rick Gasper
Manager, Network Services
King's College
133 N. River St
Wilkes-Barre PA 18711
PH: 570-208-5845
Fax: 570-208-6072
Cell: 570-760-0335
rjgasper () kings edu

-----Original Message-----
From: Paul Martin [mailto:pmartin () hgvc com] 
Sent: Friday, October 08, 2004 10:37 PM
To: Gasper, Rick
Cc: snort-users () lists sourceforge net
Subject: Re: FW: [Snort-users] Snort Acid/Base PHP 5 Windows question

How long has the server been running? I ran into this before I started 
rotating my MySQL database. It got huge and unwieldy, and took about 90 
seconds per page load. Purged the database, started with a new one, I'm 
getting 2 second loads.

Just my experience, YMMV.

Paul Martin
Network Technician
Hilton Grand Vacations Co.
(407) 393-3034
pmartin () hgvc com



Gasper, Rick wrote:

More info (If anyone cares)

OS windows 2003

Php 5.02

MYSQL verion 4.021

I used the article at www.winsnort.com <http://www.winsnort.com/> 
titled: Installing a complete IDS using IIS 5/6 Webserver

My problem is that I get slow performance from Acid OR Base. It takes 
a long time for the web page to load. I used those pieces because they 
were listed in the article available here: 
http://www.winsnort.com/modules.php?op=modload&name=Sections&file=index&req=listarticles&secid=9 
<http://www.winsnort.com/modules.php?op=modload&name=Sections&file=index&req=listarticles&secid=9>

I installed Base because ACID doesn't seem to be supported.

I used the latest software where ever I could. I read the several 
articles about mysql support being pulled in PHP 5 and saw that the 
support is now done with extensions. I tried everything I could find 
and decided to ask if anyone has done this.

Rick

------------------------------------------------------------------------

*From:* snort-users-admin () lists sourceforge net 
[mailto:snort-users-admin () lists sourceforge net] *On Behalf Of 
*Gasper, Rick
*Sent:* Friday, October 08, 2004 2:37 PM
*To:* snort-users () lists sourceforge net
*Subject:* [Snort-users] Snort Acid/Base PHP 5 Windows question

Has anyone been able to get php 5 to work with mysql?

It seems that my queries using base or acid are very slow. I am trying 
to speed up the web page loads. I was thinking that php 5 may be faster.

I have tried most of the items I have found on the web. But I do not 
php5 to work.

I get this error: PHP ERROR: PHP build incomplete

Rick Gasper
Manager, Network Services
King's College
133 N. River St
Wilkes-Barre PA 18711
PH: 570-208-5845
Fax: 570-208-6072
Cell: 570-760-0335
rjgasper () kings edu



-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: