Re: Running snort on virtual machine

[SnortFan <SnortFan () yahoo com>]

Windows hypervisor?  Here's my 2 cents. I would only use for testing. If you have something time sensitive or would 
have the potential of using most of the CPU or IO of a server I would not recommend making it a VM unless there is 
another reason for doing so. 

With Windows Hypervisor expect a 50% loss in CPU/memory etc under a
Window hypervisor layer as opposed to bare metal. VMware ESXi. Expect a 10% loss. 

Unless it's for a
DR I would not make any high use (CPU/IO) time sensitive server a VM. 

Quick list of pros:  
Cloning 
Snapshots and roll backs
Disaster Recovery
Remote shutdown and restarts

Cons:
Overhead of hypervisor will effect timing and IO as oppose to bare metal. 
It's too easy to add more servers and have resource conflicts that effect all servers on the hypervisor. 
You could be adding another layer between your nic and the vm. 




Sent from a mobile device. 

> On Jan 24, 2014, at 8:01 AM, Feroz Basir <feroz.basir () gmail com> wrote:
>
> Hi All,
>
> Any pros and cons running snort on hypervisor? Anything I should be concerned about?
>
> Thanks.
>
>
> Regards,
> Feroz Fazidi Bin Basir
> ------------------------------------------------------------------------------
> CenturyLink Cloud: The Leader in Enterprise Cloud Services.
> Learn Why More Businesses Are Choosing CenturyLink Cloud For
> Critical Workloads, Development Environments & Everything In Between.
> Get a Quote or Start a Free Trial Today. 
> http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

------------------------------------------------------------------------------
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!