[Snort-users] Snort Performance Issues

Fabio Pietrosanti naif at ...218...
Fri Aug 11 04:11:21 EDT 2000


There's some mathematical operation to calculate the calculation power for
snort?
Something like :
NRules * NTrafficToAnalyze or  similar ?


Pietrosanti  Fabio          I.NET SpA, High Quality Access to the Internet
e-mail:  naif at ...218...		( Direzione Tecnica, Gruppo Firewall )
         firewall at ...218...
PGP Key (DSS) 				http://naif.itapac.net/naif.asc

Home Page URL:            http://www.inet.it
Sede:                     Via Caldera, 21 20153 Milano
Tel:                      02-409061 Fax: 02-40906303
 --
Free advertising: www.openbsd.org - Multiplatform Ultra-secure OS


On Thu, 10 Aug 2000, Dan Hollis wrote:

> On Thu, 10 Aug 2000, Dragos Ruiu wrote:
> > On Thu, 10 Aug 2000, Dan Hollis wrote:
> > > On Thu, 10 Aug 2000, Joe Magee wrote:
> > > > How much Data (Kb, Mb,etc) per second can snort handle without dropping
> > > > packets?
> > > I am thinking a good 100bt card (dec tulip 21143) and a reasonably fast
> > > CPU (K6/500,Duron,etc) should be able to handle 10 MBytes/sec of
> > > traffic. A lot of it will depend on how complex a ruleset you are using.
> > That configuration should be complete overkill for 10Mbps.
> > I've seen 233MMX boxes handle long saturated 10Mbps 
> > bursts with a tulip and about 1500 rules.  YMMV --dr
> 
> Are you talking 10mega__BITS__ or 10mega__BYTES__?
> 
> I was talking 10megaBYTES/sec. I doubt a 233MMX could handle saturated
> 100bt ethernet with 1500 rules.
> 
> -Dan
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/snort-users
> 
> 





More information about the Snort-users mailing list