[Snort-users] My Acid/MySQL setup is mega slow.

From: Aaron The Young <acyoung(at)nysernet.org>
Date: Thu Feb 13 2003 - 15:38:18 EST

Hi,

I have two Snort sensors setup and both are on PII-333 with 256MB machines running Debian 3.0. On one sensor I have MySQL and the sensor and the other JUST has the sensor and feeds the sensor/sql DB host.

Am I foolish to think I'd get adequate performance out of this level of hardware?

The real delay is seen when entering ACID. When I first started this project, it took about 20 seconds for ACID to give me a page when I logged in, now it takes minutes and seems to get longer and longer as I load up my SQL database with data.

If I need to get a more power SQL server, I'd like confirmation. If it's just a matter of tuning, what can I do? Finally, is there an easy SQL statement to drop the last 30 days of data from my DB?

Thanks in advance.

Aaron

   ~

Aaron C. Young, MS
Manager, Internal Technologies
NYSERNet, Inc.
100 Elwood Davis Road
Syracuse, New York 13212-4312
(315) 413-0345 x5555

---

This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users Received on Thu Feb 13 16:01:34 2003