[Snort-users] Second Snort instance killing performance

[Paul Melson]

I was thinking that, or something like it, could be the case.  Originally
both sensors were configured to log to MySQL, and I thought that it might be
that they were fighting to lock a table to insert alerts.  So I switched
both to unified logging (separate log files), but the performance problems
persist.    

PaulM

-----Original Message-----
Subject: Re: [Snort-users] Second Snort instance killing performance

If you are using same logs maybe performance suffers becouse those two
processes are fighting for access to the same logs?