Re: Snort, VM or physical server ?

["Rhoades.Jon" <rhoades.jon () ensco com>]

Depends. I have both in my deployment.

How good is your vhost which hosts the vm vs how good is your physical box?

How much traffic is the snort machine going to have to handle?

In my remote offices I use vms. In my large offices I use physical machines.

Jon


On Jun 16, 2016, at 12:05 PM, Nicolas Lepolard <Nicolas.Lepolard () ejco com<mailto:Nicolas.Lepolard () ejco com>> 
wrote:

Hello,

I have a simple question :

Is it better to install Snort on a virtual machine or on a physical server? And why ?

Thank you !

Nicolas Lepolard

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. 
https://urldefense.proofpoint.com/v2/url?u=http-3A__pubads.g.doubleclick.net_gampad_clk-3Fid-3D1444514421-26iu-3D_41014381&d=CwICAg&c=DsZY2bea7iNIzyp-7sZ0t0F2UfNQZUfZhEPCv_2wBI0&r=Fari4utsflXhYGdJ8-DazdLO4lSdfEG3HBveudOpN44&m=23FfSKkbtCULVMcaMfQgRx5Lwk1iOYwBfqy4PfgCpgc&s=thAiUZHyu8yFv8jxxH523WCyuvMCnk7UdK425CrQdTk&e=
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_snort-2Dusers&d=CwICAg&c=DsZY2bea7iNIzyp-7sZ0t0F2UfNQZUfZhEPCv_2wBI0&r=Fari4utsflXhYGdJ8-DazdLO4lSdfEG3HBveudOpN44&m=23FfSKkbtCULVMcaMfQgRx5Lwk1iOYwBfqy4PfgCpgc&s=hvPD27DjKxODzi3DCLHLhNyk_to3jDBqyo1Bhe75SA8&e=
Snort-users list archive:
https://urldefense.proofpoint.com/v2/url?u=http-3A__sourceforge.net_mailarchive_forum.php-3Fforum-5Fname-3Dsnort-2Dusers&d=CwICAg&c=DsZY2bea7iNIzyp-7sZ0t0F2UfNQZUfZhEPCv_2wBI0&r=Fari4utsflXhYGdJ8-DazdLO4lSdfEG3HBveudOpN44&m=23FfSKkbtCULVMcaMfQgRx5Lwk1iOYwBfqy4PfgCpgc&s=x031Hk6mpG8eqxcbgC_2c_7kGQcAfEzqF5ur2JN4cYc&e=

Please visit 
https://urldefense.proofpoint.com/v2/url?u=http-3A__blog.snort.org&d=CwICAg&c=DsZY2bea7iNIzyp-7sZ0t0F2UfNQZUfZhEPCv_2wBI0&r=Fari4utsflXhYGdJ8-DazdLO4lSdfEG3HBveudOpN44&m=23FfSKkbtCULVMcaMfQgRx5Lwk1iOYwBfqy4PfgCpgc&s=vvfSqPbw8qUNwY3J5rPvGtr5QugiQY74lenPO9_rW-k&e=
  to stay current on all the latest Snort news!

________________________________
The information contained in this email message is intended only for the use of the individual(s) to whom it is 
addressed and may contain information that is privileged and sensitive. If you are not the intended recipient, or 
otherwise have received this communication in error, please notify the sender immediately by email at the above 
referenced address and note that any further dissemination, distribution or copying of this communication is strictly 
prohibited.

The U.S. Export Control Laws regulate the export and re-export of technology originating in the United States. This 
includes the electronic transmission of information and software to foreign countries and to certain foreign nationals. 
Recipient agrees to abide by these laws and their regulations -- including the U.S. Department of Commerce Export 
Administration Regulations and the U.S. Department of State International Traffic in Arms Regulations -- and not to 
transfer, by electronic transmission or otherwise, any content derived from this email to either a foreign national or 
a foreign destination in violation of such laws.
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. http://sdm.link/zohomanageengine
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!