Re: Snort and high performance networks

[Chris Rapier <rapier () psc edu>]

Woah, rock on! This exactly what I was hoping for! Any chance you can 
send me specs for the box? I think they already bought one but it would 
be nice to know how it measures up.

Kreimendahl, Chad J wrote:
> FWIW... I've got systems that are easily handling between 3-4Gbps each.
> That's partially hardware, partially OS, and a little tiny config work.
> Very near to all rules enabled on these interfaces, as well as all of
> the preprocessors (minus the broken ones), and a database output plugin.
>
> 0 dropped packets.   If you check the archives for this list, you'll
> find discussions about kernels that can do polling against network
> devices, and how this enhances snort performance on high speed links
> (network performance in general, really).  I believe I mention the OSes,
> maybe some config info and hardware used. 
>
> If it's of any value, the machine I'm talking about above (handling
> 3Gbps) cost around $2500 (not sure if that's retail).




-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users