[Snort-users] gigabit nic?

Hutchinson, Andrew Andrew.Hutchinson at ...3639...
Tue Sep 10 13:52:05 EDT 2002


This has already been said, but I'll just repeat it - if the OS will
support it, Snort'll use it.  I specifically have had a lot of luck
using Intel Pro/1000F Server adapters, since all of our Gig
infrastructure uses fiber.  The Linux driver support is good, and the
box I have it installed in (Dual PIII-850's (Snort only uses 1 CPU, but
this was the machine that I had available...), 256MB RAM, 2.4.18smp
kernel) keeps up with a 100Mbit sustained pipe, albeit with a somewhat
tweaked ruleset.  I've seen the traffic on that link spike up to ~
250Mbits, and Snort doesn't barf and I don't show dropped packets.

Andrew

-----Original Message-----
From: Sheahan, Paul (PCLN-NW) [mailto:Paul.Sheahan at ...2218...] 
Sent: Tuesday, September 10, 2002 2:12 PM
To: Snort List (E-mail)
Subject: [Snort-users] gigabit nic?



Hello,

I'm running Snort 1.8.7 on RH Linux 7 on a Compaq DL360. I'm wondering
if I can install a gigabit NIC in the box? How high of throughput can
Linux/Snort handle and would this change benefit me at all? We currently
don't have heavy traffic, but I'm wondering if a large attack were to
come along, would Snort still be able to catch attacks at higher NIC
speeds?

Thanks



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old cell
phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list