Snort mailing list archives

Re: hardware requirements


From: Theodore Stout <theodorestout () yahoo com>
Date: Sun, 9 Jan 2005 18:35:54 -0800 (PST)

Hey there,

I ran snort on a GIGE Fiber box.  Let me first tell
you that this is a lot of work and Barnyard has to be
super configured.  This is not for the light hearted.

I used the following

Sensor
FC2
40G HD- SCSI 15,000
2 Gig Memory
P4 3.6
Barnyard
Snort

DB
250G HD- SCSI 10,000
2 Gig Memory
P4 3.6
MySQL
PHP

The specific software version numbers were from
Partrick Harper's homepage.  We had to build a
distributed deployment because that Database was just
using too many resources and we were losing packets.  

In the end, because of various configuration problems
that we only encountered at 1 GIG, we decided to buy
vendor equipement instead.

Hope that helps.

Theo


--- Jeffery Martin <jmartin () yipes com> wrote:

Greetings, I would like to know if anyone has any
hardware
recommendations to run SNORT on. specifically im
looking to put a GigE
NIC in a box and would like to know how fast a CPU
and memory etc etc.
 
Jeff Martin III
<mailto:noc () yipes com> 

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: