Snort mailing list archives

Re: Database sizing and tuning


From: Joel Esler <jesler () sourcefire com>
Date: Fri, 11 Jan 2013 10:22:02 -0500

On Jan 11, 2013, at 7:35 AM, Mike Miller <mike () millertwinracing com> wrote:

Last time I was in the IDS realm, the 'common knowledge' was that you used Mysql for small and medium sized IDS 
implementations, but when things got bigger, Postgres scaled better. Has that changed? Is there a better alternative? 
I've got one test system that's currently doing everythign on-box (still building the DB server), and at 800 mbps 
sustained, mysql is getting pokey after about day three. :D 

I don't think it's a DB issue.  mysql can scale pretty well.  I think it's more having to do with the layout of the DB. 
 It is about 10 years old at this point and we've turned it over to the barnyard2 folks for redesign.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire
------------------------------------------------------------------------------
Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
much more. Get web development skills now with LearnDevNow -
350+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122812
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: