RE: Snort and high performance networks

["Esler, Joel - Contractor" <joel.esler () rcert-s army mil>]

How much snort can handle is alone based on RAM, Processor, harddrive
space, .. physical limitations.  I have had a 486 on 3 x 24 mgbs
circuits, over 4 Class B's worth of address space and it handled it
fine.

J

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of
Christopher Rapier
Sent: Thursday, May 20, 2004 11:13 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort and high performance networks

We have a number of networks coming into out facility that I'm 
interested in monitoring with snort. The problem is that these networks 
are big. Really big. One of them is 30GBits (3 lambdas over dwdm). The 
smaller ones are OC48, 802.11ad bonded GigE, and so forth. My question 
is how much (in whatever terms you wish to use) can snort be reasonably 
expected to handle?

If anyone can point me to resources related to snort/bro/whatever in 
high performance networks I'd sure appreciate it.

Chris



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.

Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users