OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Snort-users] Gigabit IDS

From: twig les (twiglesyahoo.com)
Date: Tue Jan 06 2004 - 11:50:35 CST


--- Erek Adams <ereksnort.org> wrote:
> On Mon, 5 Jan 2004 Tony.Williamsci.austin.tx.us wrote:
>
> > I recently picked up a Dell Poweredge 1750 at work for a
> pilot test using
> > snort as our enterprise IDS. The specs on the box
...

With those specs I would expect the PCI bus to be a bottleneck
unless it's PCI-X, maybe even then (if you use barnyard/*nix).
There are tricks you can play to get around that through fancy
configurations (bonding two ints together, running 2 instances
of snort each listening for diff types of stuff...) but chances
are you won't need to; your boxes are much beefier than mine. ;-)

=====
-----------------------------------------------------------
Only fools have all the answers.
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus

-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users