OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: [Snort-users] Snort's Processing Rate

From: Bob Walder (bwalderspamcop.net)
Date: Wed Apr 14 2004 - 02:27:38 CDT


We have tested Open Source Snort up to 100Mbps and are confident (with
the right platform!) that it could go well beyond that.

We have not yet tested it to 1Gbps, however, and for some reason
SourceFire seem unwilling to submit product to our tests, despite
numerous invitations and a LOT of behind-the-scenes discussions.

Regards,

Bob Walder
Director
The NSS Group

>> -----Original Message-----
>> From: snort-users-adminlists.sourceforge.net
>> [mailto:snort-users-adminlists.sourceforge.net] On Behalf
>> Of Matt Gibson
>> Sent: 13 April 2004 21:09
>> To: Sherif Yusuf; snort-userslists.sourceforge.net
>> Subject: RE: [Snort-users] Snort's Processing Rate
>>
>>
>> http://www.nss.co.uk/
>>
>> They have tested Snort and other IDS's at different line rates.
>>
>> -Matt
>>
>> -----Original Message-----
>> From: Sherif Yusuf [mailto:sy99doc.ic.ac.uk]
>> Sent: Tuesday, April 13, 2004 11:44 AM
>> To: Matt Gibson
>> Subject: Re: [Snort-users] Snort's Processing Rate
>>
>> Yes I know, but do you think it could cope with a 1Gbps
>> network traffic, even if we were using a Pentium IV, say 2G
>> processor? Or is there like a general limit, like 100Mbps traffic?
>>
>> Sherif
>>
>> Matt Gibson wrote:
>>
>> >That would depend on a number of factors. CPU speed,
>> amount of Memory,
>>
>> >OS etc...
>> >
>> >There isn't a hard coded limit.
>> >
>> >-Matt
>> >
>> >-----Original Message-----
>> >From: snort-users-adminlists.sourceforge.net
>> >[mailto:snort-users-adminlists.sourceforge.net] On Behalf Of Sherif
>> >Yusuf
>> >Sent: Tuesday, April 13, 2004 10:53 AM
>> >To: snort-userslists.sourceforge.net
>> >Subject: [Snort-users] Snort's Processing Rate
>> >
>> >Hi.
>> >
>> >I hust need to know the maximum (maybe published, doesnt have to be)
>> >packet processing rate while using Snort. If I could get a
>> reference to
>>
>> >where this number is stated that would be great.
>> >
>> >Thanx
>> >
>> >Sherif
>> >
>> >
>> >
>> >-------------------------------------------------------
>> >This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux
>> >tutorial presented by Daniel Robbins, President and CEO of GenToo
>> >technologies. Learn everything from fundamentals to system
>> >administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638
>> &op=click
>> >_______________________________________________
>> >Snort-users mailing list
>> >Snort-userslists.sourceforge.net
>> >Go to this URL to change user options or unsubscribe:
>> >https://lists.sourceforge.net/lists/listinfo/snort-users
>> >Snort-users list archive:
>> >http://www.geocrawler.com/redir-sf.php3?list=snort-users
>> >
>> >
>> >
>> >
>> >
>>
>>
>>
>>
>>
>> -------------------------------------------------------
>> This SF.Net email is sponsored by: IBM Linux Tutorials
>> Free Linux tutorial presented by Daniel Robbins, President
>> and CEO of GenToo technologies. Learn everything from
>> fundamentals to system
>> administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=ick
>> _______________________________________________
>> Snort-users mailing list
>> Snort-userslists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> >> https://lists.sourceforge.net/lists/listinfo/sno>> rt-users
>>
>>
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=ort-users
>>

-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op ick
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users