Snort mailing list archives
RE: gigabit nic?
From: "Hutchinson, Andrew" <Andrew.Hutchinson () Vanderbilt edu>
Date: Tue, 10 Sep 2002 15:51:30 -0500
This has already been said, but I'll just repeat it - if the OS will support it, Snort'll use it. I specifically have had a lot of luck using Intel Pro/1000F Server adapters, since all of our Gig infrastructure uses fiber. The Linux driver support is good, and the box I have it installed in (Dual PIII-850's (Snort only uses 1 CPU, but this was the machine that I had available...), 256MB RAM, 2.4.18smp kernel) keeps up with a 100Mbit sustained pipe, albeit with a somewhat tweaked ruleset. I've seen the traffic on that link spike up to ~ 250Mbits, and Snort doesn't barf and I don't show dropped packets. Andrew -----Original Message----- From: Sheahan, Paul (PCLN-NW) [mailto:Paul.Sheahan () priceline com] Sent: Tuesday, September 10, 2002 2:12 PM To: Snort List (E-mail) Subject: [Snort-users] gigabit nic? Hello, I'm running Snort 1.8.7 on RH Linux 7 on a Compaq DL360. I'm wondering if I can install a gigabit NIC in the box? How high of throughput can Linux/Snort handle and would this change benefit me at all? We currently don't have heavy traffic, but I'm wondering if a large attack were to come along, would Snort still be able to catch attacks at higher NIC speeds? Thanks ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- gigabit nic? Sheahan, Paul (PCLN-NW) (Sep 10)
- Re: gigabit nic? Erek Adams (Sep 10)
- Re: gigabit nic? The infoSphere (Sep 10)
- <Possible follow-ups>
- RE: gigabit nic? Hutchinson, Andrew (Sep 10)
- RE: gigabit nic? Sheahan, Paul (PCLN-NW) (Sep 10)
- RE: gigabit nic? Matt Kettler (Sep 10)
- RE: gigabit nic? Sheahan, Paul (PCLN-NW) (Sep 10)
- RE: gigabit nic? Matt Kettler (Sep 10)
- RE: gigabit nic? snort-users (Sep 10)
- RE: gigabit nic? Robby Desmond (Sep 15)
- RE: gigabit nic? Michael Brown (Sep 15)