[Snort-users] Snort log previewing with Acid.

Hicks, John JHicks at ...5857...
Thu Jan 16 07:27:08 EST 2003

More on indicies here:


-----Original Message-----
From: Erek Adams [mailto:erek at ...950...]
Sent: Thursday, January 16, 2003 9:49 AM
To: Anthony Liberty
Cc: 'snort-users at lists.sourceforge.net'
Subject: Re: [Snort-users] Snort log previewing with Acid.

On Thu, 16 Jan 2003, Anthony Liberty wrote:

> i've trouble when previewing snort report with acid.
> when the attack data is small, acid can show the alert report.
> but when the attack data is quite large , acid can't show the alert
> anybody has any idea how to tuning up this acid-mysql. i'm quessing this
> a problem of memory ,coz mysql needs large memory to query large data.
> my memory is 128Mb,with 512 swap and PIII-800.
> is there any script to be add to tuning up this acid report , or have u
> try to change mysql to postgressSQL , is it more faster ?

You're right.  You really need more memory on that box.  Get as much on it
as you can.  You really can't ever get 'too much'.

As for speeding up MySQL, check the archives [0].  There was some
discussion on the list or snort-dev about improving performance on MySQL.
I don't recall exactly what, but I think it was adding some indexes to the


Erek Adams

   "When things get weird, the wierd turn pro."   H.S. Thompson

[0]	http://marc.theaimsgroup.com/?l=snort-users&r=1&w=2

This SF.NET email is sponsored by: Thawte.com
Understand how to protect your customers personal information by
SSL on your Apache Web Server. Click here to get our FREE Thawte Apache 
Guide: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0029en
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list