Re: BASE performance

[Wes Young <wcyoung () buffalo edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Just a comment: What about adding a perl script like aaval uses to do
all that in the background when the cpu util is low... let it generate
all the hostnames and populate the tables etc in the background as the
information is recieved into the snort db?

Willy, Andrew wrote:
| Gentlemen,
|
| Thank you for your replies.  It turns out my IDS config is to blame, and
| address resolution (unableto+waitingfortimeout) was leading to the
| delay/lag.
|
| For the record, if for some reason you'd like to turn address resolution
| off, Kevin Johnson advises: "In your base_conf.php file I would recommend
| changing $resolve_IP to equal 0 and try again."
|
| Regards,
|
| Andrew
|
|
| -----Original Message-----
| From: Michael Steele [mailto:michaels () winsnort com]
| Sent: Monday, February 21, 2005 7:19 PM
| To: snort-users () lists sourceforge net
| Subject: RE: [Snort-users] BASE performance
|
|
| Can you tell us what optimizing the MySQL database might be, and the
| procedure?
|
| I do understand that when the alerts are deleted, at least with ACID there
| are some remains of the alerts left behind. Can these be cleaned, and
if so,
| how?
|
| Kindest regards,
| Michael...
|
| WINSNORT.com Management Team Member

- --
Wes Young
Network Security Analyst
University at Buffalo
GPG Key: http://saxjazman9-security.blogspot.com/2005/01/gpg-key.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFCG0wV1M5o0FsrrbERAk8wAJ9DOR/MQFdFL/7rR+EoTu60Eki61gCdEg9x
Ct2+QKNGO69+2PBr376G8ig=
=T9Zn
-----END PGP SIGNATURE-----


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users