[Snort-users] How big is a MySQL Database for snort?

Austad, Jay austad at ...432...
Thu Jan 18 10:26:17 EST 2001


I have 40,207 alerts, and the database is 154MB.

Jay

> -----Original Message-----
> From: Jason Boyer [mailto:jason at ...418...]
> Sent: Thursday, January 18, 2001 7:26 AM
> To: Prins, J.H.
> Cc: 'snort-users at lists.sourceforge.net'
> Subject: Re: [Snort-users] How big is a MySQL Database for snort?
> 
> 
> The size of the database is going to reflect on how many 
> alerts you get. So
> lots of alerts your database will grow accordingly and vice versa.
> 
> Running Snort 1.7 with latest ACID my database grows about a 
> 1 MB for every
> 1000 or so alerts.
> 
> Cheers,
> Jason
> 
> "Prins, J.H." wrote:
> 
> > Hello,
> >
> > At the moment my firewall is a P100 with 48 MB of memory 
> and I'm logging to
> > textfiles. I would like to log to a MySQL Database and I'm 
> wondering if I
> > can put this database on the same server, and how big does 
> this database
> > become. Are we talking about GB's of data of just some MB's?
> >
> > The Firewall server has two 1GB disks and runs IPChains 
> with a 2.2.14
> > kernel. Snort runs on the same box and seems to run rather 
> nice. For the
> > rest there runs hardly anything on this firewall.
> >
> > Thanks very much.
> > Greetings,
> > Jan Hugo Prins
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> 




More information about the Snort-users mailing list