Re: [Snort-users] ACID/MySql DB performance

Scoot and all,

>I normally see a pretty big performance change around 100k alerts, at
At 400k events its painfully, unbearably slow on a good PIII box with 512MB of RAM.

>When do you start feeling the performance differences??
About 200K, I'd say. What is WORSE is that when some of the alerts are removed and the db size goes down to about 50K events the database stays slow! Only the drop heals it.

>I have done the extra indexes and I check the tables for
Could you provide more details on what was done??

In fact, I will be happy if more people would share their MySQL performance optimization tips... :-)

Best,

-- 
  Anton A. Chuvakin, Ph.D., GCIA
     
http://www.chuvakin.org
   
http://www.info-secure.org



-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users