[Snort-users] Snort Machines
duke at ...10559...
Fri Nov 14 13:14:07 EST 2003
Friesz, Ross said the following on 11/14/2003 2:50 PM:
> I plan on purchasing a new machine to run snort. Currently I have a P3
> 500 with 512 MB RAM and an 18 Gig drive. What I would like to know is
> what others are using.
Without knowing what network you'll be analyzing (i.e. is it 10 machines
on 10Mbps Ethernet or 1000 machines on Gigabit?) it's impossible to give
you a recommendation that's based on anything.
At home I'm using a Celeron 400 with 384 RAM that also has many other
duties (including the relaying of this message). On a production
network I use a 2.4GHz P4 that also has other duties (although all are
administrative); and it sniffs on a Gigabit interface the traffic of
about 6 servers. I could probably put the Celeron in it's place and it
wouldn't miss a beat.
More information about the Snort-users