Re: [Snort-users] IDS and Firewall

This is a multi-part message in MIME format...

------------=_1083157333-1374-390
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Marcin,

Try using barnyard. It will help.
I have snort+barnyard+mysql running on 2.66 with 98mb ram for days.

Regards,
Alejandro Flores

Ps. I have done some 'tests' comparing MySQL and PostgreSQL with snort.
Single CPU and 4 cpu. MySQL run fast as hell. I know, I'm not an expert
on PostgreSQL and the only improvement I've done was using '-F' which
disables fsync() calls each insert. I used MySQL with default
configuration.


> Hi,
>
> Today I used AMD K6 with 128 megs of RAM
> I configured Snort and PostgreSQL server on it
> and it died after 10 min. I suggest using other machine
>
> ----------------
> Best Regards, M.
>
>
>
>
> ----- Original Message -----
> From: "Kernel The Canine" <kernel_canine@yahoo.com>
> To: <snort-users@lists.sourceforge.net>
> Sent: Wednesday, April 28, 2004 9:34 AM
> Subject: [Snort-users] IDS and Firewall
>
>
> > Hello
> >
> > I'm running shorewall.net as my firewall, on RedHat
> > linux box version 9.0
> >
> > Is it recommended to run on it snort (on the same box)
> > or should I run it on another computer
> >
> > Waiting for replies
> >
> > Kind Regards
> > Kernel The Canine
> >
> >
> >
> >
> > __________________________________
> > Do you Yahoo!?
> > Win a $20,000 Career Makeover at Yahoo! HotJobs
> > http://hotjobs.sweepstakes.yahoo.com/careermakeover
> >
> >
> > -------------------------------------------------------
> > This SF.Net email is sponsored by: Oracle 10g
> > Get certified on the hottest thing ever to hit the market... Oracle 10g.
> > Take an Oracle 10g class now, and we'll give you the exam FREE.
> > http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users@lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/...fo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.p...st=snort-users
> >
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: Oracle 10g
> Get certified on the hottest thing ever to hit the market... Oracle 10g.
> Take an Oracle 10g class now, and we'll give you the exam FREE.
> http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users@lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/...fo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.p...st=snort-users
>




--TriForSec
http://www.triforsec.com.br/

------------=_1083157333-1374-390--


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users