Snort mailing list archives

Re: hardware requirements


From: Rich Adamson <radamson () routers com>
Date: Mon, 10 Jan 2005 09:51:52 -0600

As a strang recent example, we're trying to identify why a
specific client's server with two gige interfaces cannot sustain
traffic throughput greater then 170,000 bits/sec through a single
interface.

That's really poor. I get ~95% of 100BaseT (i.e. about 95,000,000 bits/sec) 
when serving ~600MByte files via FTP from a P4 2.40B to a PIII 450 client. 
Nothing special infrastructure wise, either; the client uses an Realtek 
8139-based NIC I bought for under 10GBP and the server uses the on-board 
Intel Pro-100VE. The switch is a no-name I bought for 20GBP.

I'm under no illusions that this is 'enterprise' hardware or even a 
remotely similar test, but the performance you're indicating is /so/ poor 
it indicates something is /seriously/ wrong for you.

We've double-checked all the basic stuff, and there
are no errors or discards happening anywhere, including the
correctly configured cisco switch that it attachs to. We'll find
the issue, but we're just not there as yet.

Are you sure all your units of measurement are correct?! ;-)

Oh yes, been doing this type of work professionally for many years. :)

There is something wrong with that server, just haven't got to the
root as yet.




-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: