RE: Snort on Crossbeam C30

["Joshua Berry" <jberry () PENSON COM>]

1)       The amount of instances that Crossbeam can handle is directly
proportional to the amount of traffic Snort is monitoring.  The number
of instances has nothing to do with Crossbeam (any box can run however
many instances you want).  You don't really have to work with Crossbeam,
there is nothing to configure on Crossbeam.  Snort's performance is
heavily impacted by CPU speed and available RAM, the Crossbeam offsets
potential performance issues with their proprietary "Network Module"
technology.
 
2)  No other issues.  There really aren't issues with Crossbeam, just
with Snort itself and how many instances you want to monitor.
 
-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of
Christopher.Lewis () compucom com
Sent: Friday, June 11, 2004 6:59 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort on Crossbeam C30
Sensitivity: Confidential
 
Hello,
 
I am trying to find out if there is any body out there that has
installed multiple instances of snort on the Crossbeam C30. I have never
worked with the Crossbeam and I am trying to find out if there are any
issues that I should know about before I begin the project. 
1.) How many instances will the crossbeam handle? <-- Does it depend
only on the amount of ports available on the box?
2.) Any other issues that might be informative before I begin.
 
Christopher M. Lewis, CISSP
One's first step in wisdom is to question everything - and one's last is
to come to terms with everything. 
Georg Christoph Lichtenberg
<http://www.quotationspage.com/quotes/Georg_Christoph_Lichtenberg/
<http://www.quotationspage.com/quotes/Georg_Christoph_Lichtenberg/> >
(1742 - 1799)
This message contains information which may be confidential and/or
privileged. Unless you are the addressee (or authorized to receive on
behalf of the addressee), you may not use, copy, or disclose to anyone
the message or any information contained in the message (including
any/all attachments). If you have received this message in error, please
advise the sender by reply e-mail, and delete/destroy this message.