Snort mailing list archives
Re: SQL Database way too large.
From: Paul Schmehl <pauls () utdallas edu>
Date: Fri, 21 Jan 2005 17:01:24 -0600
--On Friday, January 21, 2005 05:47:45 PM -0500 DTC <chubeshoi () chubes com> wrote:
Yes, there is, but first you need to find out why you're "filling up" the db in one night! Is it because you have all the rules enabled? Because you have an incredibly large pipe?Hi All. I just recently got all the components of snort working (apache, php, mysql, acid, etc.) But after hooking it up on a monitor port on my core switch, the database became so big after one night, acid takes over 20 seconds to load the mainpage! Is there any script out there or setting that can help me clear my sql database every night??
You can get copy of my db archiving script here:http://www.ntsug.org/ - click on downloads. It's a tarball with a perl script, config file and readme. Should be self-explanatory.
Paul Schmehl (pauls () utdallas edu) Adjunct Information Security Officer The University of Texas at Dallas AVIEN Founding Member http://www.utdallas.edu ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- SQL Database way too large. DTC (Jan 21)
- Re: SQL Database way too large. Paul Schmehl (Jan 21)
- Assistance with archivePlus script to archive snort DB. DTC (Jan 24)
- Re: Assistance with archivePlus script to archive snort DB. Paul Schmehl (Jan 24)
- Assistance with archivePlus script to archive snort DB. DTC (Jan 24)
- Re: SQL Database way too large. Paul Schmehl (Jan 21)