Re: Snort, VM or physical server ?

[Ryan Martin <rmartin () internet2 edu>]

I think in the end it isn’t so much which is better, but which meets your requirements and is most cost effective.  If 
you already have a hypervisor, VM’s are (relatively speaking) cheap.  Spin up a VM and see if it can handle the load 
you throw at it.  If so, then done in one.  If not, then increase VM guest resources.  If that’s not possible, then do 
some more homework given your specific implementation requirements and check out purchasing some hardware to back it up.

My personal preference is hardware, and a dedicated box.  I like having it separate, but I really could argue that one 
either way.

Thanks,

-Ryan

On Jun 16, 2016, at 11:49, Nicolas Lepolard <Nicolas.Lepolard () ejco com<mailto:Nicolas.Lepolard () ejco com>> wrote:

Hello,

I have a simple question :

Is it better to install Snort on a virtual machine or on a physical server? And why ?

Thank you !

Nicolas Lepolard

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. 
http://pubads.g.doubleclick.net/gampad/clk?id=1444514421&iu=/41014381_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!