[Snort-users] Gigabit and Snort
Kreimendahl, Chad J
Chad.Kreimendahl at ...4716...
Tue Aug 17 17:23:15 EDT 2004
Having a set of fiber connections doesn't matter if the motherboard and
OS can't handle the bandwidth. There should be no problem handling
gig speeds (even upwards of 3-4 Gbps) on one machine... all for less
than $7,000 (copper or fiber gigabit, pick your poison)
For more info on OS/Hardware stuff in relation to this, search google
for snort and polling
From: Edin Dizdarevic [mailto:edin.dizdarevic at ...7509...]
Sent: Monday, August 16, 2004 11:11 AM
To: Gross, Mark
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Gigabit and Snort
sorry, but we had this several times now. There's nothing said before
not applying to your setup. You'll have to take barnyard or try to log
in unified mode at least for your tests first. Also use another libpcap
provided by Phil Wood.
If you have more than one machine you may want to split the traffic you
observe using BPF.
Gross, Mark wrote:
> Hello List,
> I am having a few problems with losing packets at high speeds. First
> a bit about the hardware. Assume that all connections are fiber.
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
More information about the Snort-users