Re: hardware requirements

[Theodore Stout <theodorestout () yahoo com>]

True.  

We used the entire rule set and then singled it down
to worms, virus, and porn related entries.

Motherboard:  Humm... I used a DL380 for the Snort
install.  Got no idea about the motherboard.

Theo

--- Rich Adamson <radamson () routers com> wrote:

> Right, so his original question should be reworded
> to be
> oriented towards when will snort begin dropping
> packets,
> etc. I've not seen anyone try to qualify
> motherboards, etc,
> under different traffic loads, rule sets, etc.
>
> ------------------------
> > Rich,
> >
> > Yes this is true however most people use GigE
> Cards
> > for traffic environments where major traffic, ie
> 1000
> > Meg traffic,  is expected....
> >
> > Theo
> >
> > --- Rich Adamson <radamson () routers com> wrote:
> >
> > > > Greetings, I would like to know if anyone has
> any
> > > hardware recommendations to run SNORT on. 
> > > specifically im looking to put a GigE NIC in a
> > > > box and would like to know how fast a CPU and
> > > memory etc etc.
> > >
> > > Just about any box will work, however what you
> > > really want to know
> > > is... at what level of traffic will snort begin
> to
> > > drop packets.
> > > In other words, its traffic volume dependent,
> not
> > > GigE dependent.
> > >
> > > I've got several Win32 boxes running just fine
> on
> > > boxes that came
> > > with GigE ports, but the traffic volumes at
> those
> > > locations are so
> > > low that snort could have been using a 10meg
> port.
> > >
-------------------------------------------------------
> > > The SF.Net email is sponsored by: Beat the
> > > post-holiday blues
> > > Get a FREE limited edition SourceForge.net
> t-shirt
> > > from ThinkGeek.
> > > It's fun and FREE -- well,
> > > almost....http://www.thinkgeek.com/sfshirt
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or
> > > unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
> > >
> >
> >
> >
> >             
> > __________________________________ 
> > Do you Yahoo!? 
> > All your favorites on one personal page ETry My
> Yahoo!
> > http://my.yahoo.com 
>
> ---------------End of Original
> Message-----------------
-------------------------------------------------------
> The SF.Net email is sponsored by: Beat the
> post-holiday blues
> Get a FREE limited edition SourceForge.net t-shirt
> from ThinkGeek.
> It's fun and FREE -- well,
> almost....http://www.thinkgeek.com/sfshirt
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or
> unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
>



                
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - Find what you need with new enhanced search.
http://info.mail.yahoo.com/mail_250


-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users