Re: Linux of FreeBSD

[Chris Green <cmg () uab edu>]

"Olav Langeland" <Olav.Langeland () activeisp com> writes:

> I am seeking advice on what is best suited for Snort use, Linux or
> FreeBSD. It will monitor either a dual E3 link (currently at 50%
> capacity) or a single port producing about 30-40Mbit. Will Debian Linux
> handle this kind of traffic without problem, or is FreeBSD a better
> choice? The machine in question is P3-800, 512MB Ram and SCSI raid.

Out of the box, FreeBSD gives you packet loss stats that will help
guide tuning your snort process and the same stats are fairly new to
the linux port of pcap.
-- 
Chris Green <cmg () uab edu>
Fame may be fleeting but obscurity is forever.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users