RE: gigabit nic?

[Michael Brown <mbrown () pathfire com>]

Paul,
        All of my Sensors run on GigE NICs. I did that for future growth and
current bandwidth stability(for spikes and such). Here are a few of my stats
from 3 of my sensors... 


1.)

        Snort analyzed 31784296 out of 31784295 packets, The kernel dropped
0(0.000%) packets$
        Snort analyzed 21952672 out of 21952671 packets, The kernel dropped
0(0.000%) packets$
        Snort analyzed 36355604 out of 36355604 packets, The kernel dropped
0(0.000%) packets$
        Snort analyzed 158105120 out of 158105136 packets, The kernel
dropped 0(0.000%) packets$

2.)

        Snort analyzed 171665664 out of 171812182 packets, The kernel
dropped 0(0.000%) packets$
        Snort analyzed 1734374528 out of 1735901114 packets, The kernel
dropped 0(0.000%) packets$
        Snort analyzed 706201408 out of 707347348 packets, The kernel
dropped 0(0.000%) packets$
        Snort analyzed 391378400 out of 400241109 packets, The kernel
dropped 0(0.000%) packets$
        
3.)
        Snort analyzed 969793216 out of 1038962304 packets, The kernel
dropped 0(0.000%) packets$
        Snort analyzed 642078336 out of 690270334 packets, The kernel
dropped 0(0.000%) packets$      
        Snort analyzed 777711104 out of 873403388 packets, The kernel
dropped 0(0.000%) packets$
        Snort analyzed 945054912 out of 1557765510 packets, The kernel
dropped 0(0.000%) packets$
    

-----Original Message-----
From: Sheahan, Paul (PCLN-NW) [mailto:Paul.Sheahan () priceline com] 
Sent: Tuesday, September 10, 2002 3:12 PM
To: Snort List (E-mail)
Subject: [Snort-users] gigabit nic?



Hello,

I'm running Snort 1.8.7 on RH Linux 7 on a Compaq DL360. I'm wondering if I
can install a gigabit NIC in the box? How high of throughput can Linux/Snort
handle and would this change benefit me at all? We currently don't have
heavy traffic, but I'm wondering if a large attack were to come along, would
Snort still be able to catch attacks at higher NIC speeds?

Thanks



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old cell phone?
Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users