Re: [Sqlgrey-users] RELEASE: 1.5.9 + with throttling

[Michel B. <mi...@bo...>]

Le Mercredi 08 Juin 2005 13:06, Michel Bouissou a =E9crit :
>
> > Michel, could you give us a ratio between the results of:
> > grep "sqlgrey: grey: throttling: " | wc -l " (on a log spanning the l=
ast
> > max_connect_age period)
> > and
> > select count(*) from connect
> >
> > on your configuration ? This would help measure the benefits of
> > tarpitting.
>
> I'm not sure my server is a good real-life example, as its traffic is
> really moderate.
>
> OTOH, I've already seen some tapitting in action since I installed it
> yesterday afternoon, and I recall my "connect" table size had been
> mutiplied by a factor 10 when the latest M$ worm came out... Hence the =
idea
> I had about tarpitting for fighting this kind of event.
> Guess we need another new M$ worm to figure out the benefits it gives w=
hen
> such an event occurs...

Anyhow, for now I have:

mysql> select count(*) from connect;
+----------+
| count(*) |
+----------+
|      198 |
+----------+

[root@totor etc]# grep -c "totor sqlgrey: grey:=20
throttling:" /var/log/mail/info
29


--=20
Michel Bouissou <mi...@bo...> OpenPGP ID 0xDDE8AC6E