RE: Minimum hardware config for Snort

["Schmehl, Paul L" <pauls () utdallas edu>]

There *is* no such thing.  It depends entirely upon a number of factors
which cannot be arithmetically determined.  How much bandwidth do you
have?  How much of that bandwidth do you intend to monitor with snort?
What OS are you going to run snort on?  What processor (Intel, Sun,
Alpha, etc.) How many of the rules will you have enabled?  How many of
the preprocessors (like portscan2, rpc_decode, frag2, http_decode, etc.)
will you enable?  How many outputs will you use (log, barnyard,
database, etc.)?  How much packet loss is acceptable?  What other
services will be running on the box?  Etc., etc., etc.

It's a question that cannot be answered except by trial and error.

Tell us what you intend to use it for *in detail*, and *someone* on the
list will have similar parameters and be able to share their
experiences, which will be helpful, but not definitive.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

> -----Original Message-----
> From: Sheahan, Paul [mailto:Paul.Sheahan () priceline com] 
> Sent: Friday, August 08, 2003 1:19 PM
> To: Snort List (E-mail)
> Subject: [Snort-users] Minimum hardware config for Snort
>
> Can anyone point me to a minimum recommended hardware config 
> for a Snort sensor (processor, memory and disk etc)?


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users