[Snort-devel] Current 2.0 and Sourcefire's Testing Methods

Marc Norton marc.norton at ...402...
Mon Mar 24 05:47:25 EST 2003


Yes, we will do a paper on the subject soon.  


> -----Original Message-----
> From: snort-devel-admin at lists.sourceforge.net [mailto:snort-devel-
> admin at lists.sourceforge.net] On Behalf Of Matthew Callaway
> Sent: Tuesday, March 18, 2003 7:55 PM
> To: snort-devel at lists.sourceforge.net
> Subject: [Snort-devel] Current 2.0 and Sourcefire's Testing Methods
> 
> Greetings,
> 
>   I was at Marty's recent talk in Chicago.  It was fun, thanks for
> making the effort, Sourcefire folks.  While there, I'd asked what
> version of snort Sourcefire uses in production products.  Is there any
> plan to make that public, say on the website, perhaps, "Sourcefire
uses
> snort 2.0 build 52 in its IDS products"?  Perhaps an official 2.0
> release is pending?
> 
>   Also, what do you think about publishing Sourcefire's methodologies
> for testing snort's performance.  That is, there are various metrics
> given for each Sourcefire platform, "This box can handle 20 Mbits,
while
> this box can handle 100 Mbits" etc.  I'm curious how you arrive at
these
> numbers.  There are many archived discussions regarding testing
snort's
> performance, I'm wondering what Sourcefire does.  My thought is that
we
> all might benefit from open discussion of your performance testing.
> 
> Your thoughts?
> 
> Matt
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: Does your code think in ink?
> You could win a Tablet PC. Get a free Tablet PC hat just for playing.
> What are you waiting for?
> http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel





More information about the Snort-devel mailing list