[Snort-users] Second Snort instance killing performance

Paul Melson pmelson at ...11827...
Thu Sep 8 07:24:48 EDT 2005

I was thinking that, or something like it, could be the case.  Originally
both sensors were configured to log to MySQL, and I thought that it might be
that they were fighting to lock a table to insert alerts.  So I switched
both to unified logging (separate log files), but the performance problems


-----Original Message-----
Subject: Re: [Snort-users] Second Snort instance killing performance

If you are using same logs maybe performance suffers becouse those two
processes are fighting for access to the same logs?

More information about the Snort-users mailing list