Snort mailing list archives
Re: Linux of FreeBSD
From: Martin Roesch <roesch () sourcefire com>
Date: Tue, 27 Nov 2001 08:56:14 -0500
You should keep in mind that the IP stack performance is completely irrelevant for an application like Snort, we don't use the IP stack at all. -Marty Olav Langeland wrote:
From: Erek Adams [mailto:erek () theadamsfamily net] Sent: 26. november 2001 17:16On Mon, 26 Nov 2001, Olav Langeland wrote:I am seeking advice on what is best suited for Snort use, Linux or FreeBSD. It will monitor either a dual E3 link (currently at 50% capacity) or a single port producing about 30-40Mbit. Will DebianLinuxhandle this kind of traffic without problem, or is FreeBSD a better choice? The machine in question is P3-800, 512MB Ram and SCSI raid.Well, you're about to get into a Holy OS War, but other than that...Friendsdon't let friends use RedHat. :-)Keep this fact in mind: Run snort on _your_ OS first. If it fails, ordropspackets, YOU (as an admin) will see and notice that. On stuff youknow, it'seasier to understand and fix. Then if you can't fix it, try anotherOS.That's the long and short of it from the trenches.Religion wars have been started for less, I know :) I was more interested in TCP/IP performance issues than "what is the best OS" kind of arguments, but these days it seems there isnt a huge difference after the 2.4.x kernel. Thanks for all the help. -- Olav Langeland <> olav.langeland () activeisp com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list
-- Martin Roesch - President, Sourcefire Inc. - (410)552-6999 roesch () sourcefire com - http://www.sourcefire.com Snort: Open Source Network IDS - http://www.snort.org _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Linux of FreeBSD Olav Langeland (Nov 26)
- Re: Linux of FreeBSD Erek Adams (Nov 26)
- RE: Linux of FreeBSD Abe L. Getchell (Nov 26)
- Re: Linux of FreeBSD Casey Allen Shobe (Nov 26)
- RE: Linux of FreeBSD Abe L. Getchell (Nov 26)
- Re: Linux of FreeBSD Chris Green (Nov 26)
- RE: Linux of FreeBSD Abe L. Getchell (Nov 26)
- <Possible follow-ups>
- RE: Linux of FreeBSD Michael Aylor (Nov 26)
- Re: Linux of FreeBSD Casey Allen Shobe (Nov 26)
- RE: Linux of FreeBSD Olav Langeland (Nov 27)
- Re: Linux of FreeBSD Martin Roesch (Nov 27)
- Re: Linux of FreeBSD Erek Adams (Nov 26)