Snort mailing list archives

Re: Gigabit performance


From: Jason Brvenik <jasonb () sourcefire com>
Date: Thu, 24 Sep 2009 23:45:52 -0400

I'm guessing that it is not possible to do what you are asking. You
should investigate using real hardware designed for the purpose.

On Thu, Sep 24, 2009 at 10:39 AM, Tomás Heredia
<tomas.heredia () activesec biz> wrote:
Hi all!

   I know this is a many-times asked question, but I can´t find any
conclusive information about this scenario..

I need to  use snort in inline mode, and have to know which hardware
would I need to run:

Snort 2.8.x in inline mode
Full (or almost) rule set, including upt to date VRT rules
No DB (just text alerts)
VMWare ESXi based (single VM on this ESXi)
Dual gigabit ethernet, plus one form management..
And support near Gigabit traffic WITHOUT any packet loss.

Does anybody have experience in a setup like this?

Thanks!

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: