[Snort-users] Snort solaris perfs
guillo_c at ...1938...
Thu Jun 28 14:18:32 EDT 2001
In my difficult Quest to get some figures about snort perfs i'm facing a
I tried to bench it on different systems, and procs. I generate some
differents fixed rates with tcpreplay, another host listens with snort
1.8-beta4 build 18, 1600 rules and some preprocessors.
FreeBSD 4.2, Linux (2.2.18), OpenBSD 2.8 on a PIII with a 3C905B NIC
seems to handle a 2Mb load with no loss.
Above 2Mb of load, the received number doesn't match the sent numbers of
What suprises me the most, is that I get 30% loss at 10Mb on a PIII
FreeBSD, and 75% of loss with a Netra T1 solaris 2.6 !!! Why such a bad
To get these figures I use the information given by snort received and
drop, but on Solaris and linux I can't get the drop figures. So when I
say my host can handle 2Mb I rely on snort stats.
During the test I also found an impressive difference between snort 1.7
(95% loss at 10Mb OpenBSD PII400 3C905C) and 1.8 (46% loss at 10Mb
OpenBSD PII400 3C905C)
Does anyone has perform similar bench? Share please...
Fluxus est une société BT Ignite
Phone : +184.108.40.206.70.00 - Fax : +220.127.116.11.70.14
30, rue du Chateau des Rentiers - 75013 PARIS
More information about the Snort-users