Re: Gigabit IDS

[twig les <twigles () yahoo com>]

--- Erek Adams <erek () snort org> wrote:
> On Mon, 5 Jan 2004 Tony.Williams () ci austin tx us wrote:
>
> > I recently picked up a Dell Poweredge 1750 at work for a
> pilot test using
> > snort as our enterprise IDS.  The specs on the box 
...

With those specs I would expect the PCI bus to be a bottleneck
unless it's PCI-X, maybe even then (if you use barnyard/*nix). 
There are tricks you can play to get around that through fancy
configurations (bonding two ints together, running 2 instances
of snort each listening for diff types of stuff...) but chances
are you won't need to; your boxes are much beefier than mine.  ;-)

=====
-----------------------------------------------------------
Only fools have all the answers.   
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users