[Snort-users] Snort drops packets with SQL logging.

Brian bmc at ...950...
Mon Nov 12 11:46:03 EST 2001


According to Thomas Novin:
> Any idea why snort/MySQL can't keep up with this configuration? The network 
> load is approx 20 Mbit (peaks 30).

Could it be that SQL is not designed for writing packets raw to disk?

Maybe.

Could it be that MySQL is slower than the traffic that you see on the
network?

Maybe.

Barnyard is your friend.  Learn to love it.

-- 
dolphins, the 'other' white meat




More information about the Snort-users mailing list