[Snort-users] Fiber Tap

Matt Kettler mkettler at ...4108...
Wed Nov 19 11:02:02 EST 2003

At 02:35 PM 11/17/2003, SNORT wrote:
>A little followup Q.... (sorry)8)
>How big a load can SNORT handle befour it needs Fiber Tap??

A fiber tap has absolutely nothing to do with the amount of load snort can 

Thus there is no answer to your question, as the question itself makes no 

  If any answer applies, it's "infinite"..

Snort never requires a fiber tap to handle increased load. Snort may 
require a higher end CPU, and if you're using copper ethernet, it will be 
limited by the speed of that line, but gigabit ethernet speeds are possible 
over plain copper, no fiber involved.

Most snort setups can't handle a fully saturated gigabit ethernet segment 
without missing packets anyway, just due to exhaustion of available CPU power.

More information about the Snort-users mailing list