Snort mailing list archives

Re: Hardware Requirements For Snort Inline


From: "Will Metcalf" <william.metcalf () gmail com>
Date: Wed, 31 Oct 2007 15:51:39 -0500

Are you using snort_inline or snort proper with --enable-inline?  can
you send your snort.conf?

On 10/31/07, andy () thenynoc com <andy () thenynoc com> wrote:
Hi,

We need to run snort_inline with only 2 rules (ddos.rules and
dos.rules) to protect roughly 70Mbps of bandwidth.

What kind of hardware would we need.  Currently, we are running a Xeon
2.4 w/HT, 1gb ram and whenever we try enabling snort_inline w/o
clamav, the network starts to have increased latency and drops random
packets.  Cpu load doesn't go too high either.

Any suggestions?

Thanks
Andy


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: