Re: [sentinix-list] Improve Snort Alert reporting speed?

"Will Bailey" <[email protected]> Tue, 14 Sep 2004 12:50:14 -0700
Newsgroups gmane.linux.sentinix
Message-ID <[email protected]>
I have had to power down the server. It just won't respond when trying to =
view Snort reports.  If anyone has suggestions, that would be great!

-Will

>>> [email protected] 09/09/04 11:16AM >>>
Is there a way to improve the speed when viewing Snort alert reports?  It =
really "chugs" on my older HP NetServer LC2 (PII 366) w/RAID. It takes =
several minutes to pull up activity reports. =20

I noticed that we get thousands of invalid IP traffic related packets =
reported due to running Netware in a cluster. I tried to disable the =
particular alert & restart to see if that would help. However, it is still =
so slow that it is barely useable. =20

Any recommendations re. configuration changes (IE: even if I need to edit =
some config files manually) would be welcomed.=20

Thanks,
Will

_______________________________________________
SENTINIX mailing list
[email protected]=20
http://elevenprospect.com/mailman/listinfo/sentinix