[Snort-users] Second Snort instance killing performance
pmelson at ...11827...
Thu Sep 8 07:24:48 EDT 2005
I was thinking that, or something like it, could be the case. Originally
both sensors were configured to log to MySQL, and I thought that it might be
that they were fighting to lock a table to insert alerts. So I switched
both to unified logging (separate log files), but the performance problems
Subject: Re: [Snort-users] Second Snort instance killing performance
If you are using same logs maybe performance suffers becouse those two
processes are fighting for access to the same logs?
More information about the Snort-users