Re: inline snort at 400 mb ?

[Roger Harris <roger.harris () consultsouth net>]

I just joined this list and the first messages I saw were flames 
regarding not sending advertisements, but since you asked...

There is a company called Endace that makes both PCI cards and 
appliances that can run up to 10GigE, although their model is currently 
to be tapped into the connection and not literally in line.  Their 
hardware is integrated with SNORT and offloads packet matching from the 
CPU and matches in hardware/writes directly to memory.  If you compile 
SNORT from source you'll see the "--with-DAG" option and that's their 
proprietary technology.

More info at my site:

http://consultsouth.net/ws//index.php?option=com_content&task=blogsection&id=5&Itemid=12

Roger Harris



James Affeld wrote:
> Was wondering if you know of anyone who has used snort for line-rate
> deep inspection on networks up to about 400 mb data flow.
> And if so on what hardware.
>
>
>
>
>
>  
> ____________________________________________________________________________________
> Do you Yahoo!?
> Everyone is raving about the all-new Yahoo! Mail beta.
> http://new.mail.yahoo.com
>
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>   


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users