RE: Question about best hardware

["AJ Butcher, Information Systems and Computing" <Alex.Butcher () bristol ac uk>]

--On 10 March 2004 09:45 -0600 Josh Berry <josh.berry () netschematics com> 
wrote:

> Here is what I have done for the ACID config:
>
> I am using the Persistent connection option and have turned off
> referential integrity.  I disabled refresh_stat_page and
> show_previous_alert.  I disabled IP resolution and show_summary_stats.
> Event_cach_auto_update and maintain history are disabled.
>
> Also, on the tables I run optimize table [table_name].

<http://www.mysql.com/doc/en/OPTIMIZE_TABLE.html> suggests this might be 
worth running once a month/week. A task for a cronjob, I think.

> It helps to create an index on tcphdr.tcp_sport, tcphdr.tcp_dport,
> acid_event.sid, acid_event.cid, acid_ag_alert.ag_sid,
> acid_ag_alert.ag_cid.

FYI, it looks as though these indexes are created automatically if you use 
the contrib/create_mysql script from the Snort distribution and the 
create_acid_tbls_mysql.sql script from the ACID distribution.

Best Regards,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users