Snort mailing list archives

Re: Can snort run on bare-metal vm or a virtual machine ?


From: Matt Olney <molney () sourcefire com>
Date: Tue, 30 Mar 2010 08:48:41 -0400

Kum,


ER...sure it will run on some pretty crappy hardware.  Just know that
your detection capability will be impacted if you run on a sub-spec'd
machine.  Memory is required for the fast-pattern matcher, frag3 and
stream5.  Horsepower dictates the number of rules you can run and
still maintain sufficient throughput to provide detection.  This
balance is environment specific, so the best thing you can do is fire
it up and start testing.

Matt

On Tue, Mar 30, 2010 at 6:10 AM, Kum Weng Luey <kumwengluey () gmail com> wrote:
Hi,

I was wondering if it is possible for snort to be running on either
a bare-metal virtual machine or a virtual machine with a base operating
system. How would the performance be like?

Regards,
KW
------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: