Snort mailing list archives

Re: gigabit nic?


From: Erek Adams <erek () theadamsfamily net>
Date: Tue, 10 Sep 2002 12:30:39 -0700 (PDT)

On Tue, 10 Sep 2002, Sheahan, Paul (PCLN-NW) wrote:

I'm running Snort 1.8.7 on RH Linux 7 on a Compaq DL360. I'm wondering if I
can install a gigabit NIC in the box? How high of throughput can Linux/Snort
handle and would this change benefit me at all? We currently don't have
heavy traffic, but I'm wondering if a large attack were to come along, would
Snort still be able to catch attacks at higher NIC speeds?

Snort doesn't care about the NIC too much.  As long as snort can talk to
libpcap and get info, it wouldn't care if it was a tincan and string on the
other side.  :)

Now, if your OS can handle the GBIC, that's another question.  You'll need
good drivers and a solid card.  Check out Intel--Someone told me of a eval
demo deal to get a 10/100/1000 (Gig over copper) card for about $33.  Check
out the offers on the website, you might find one for testing.

The more hardware you can throw at snort the happier it becomes.  Just like
any other pig, the more mud, the better.  :)

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net




-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: