[Snort-users] Snort Performance Issues

Dragos Ruiu dr at ...50...
Thu Aug 10 16:42:03 EDT 2000


On Thu, 10 Aug 2000, Dan Hollis wrote:
> On Thu, 10 Aug 2000, Joe Magee wrote:
> > How much Data (Kb, Mb,etc) per second can snort handle without dropping
> > packets?
> 
> I am thinking a good 100bt card (dec tulip 21143) and a reasonably fast
> CPU (K6/500,Duron,etc) should be able to handle 10 MBytes/sec of
> traffic. A lot of it will depend on how complex a ruleset you are using.
> 

That configuration should be complete overkill for 10Mbps.
I've seen 233MMX boxes handle long saturated 10Mbps 
bursts with a tulip and about 1500 rules.  YMMV --dr
-- 
dursec.com ltd. / kyx.net - we're from the future    http://www.dursec.com




More information about the Snort-users mailing list