[Snort-users] Gigabit and Snort

Kreimendahl, Chad J Chad.Kreimendahl at ...4716...
Tue Aug 17 17:23:15 EDT 2004


 
Having a set of fiber connections doesn't matter if the motherboard and
OS can't handle the bandwidth.    There should be no problem handling
gig speeds (even upwards of 3-4 Gbps) on one machine... all for less
than $7,000  (copper or fiber gigabit, pick your poison)

For more info on OS/Hardware stuff in relation to this, search google
for snort and polling

-----Original Message-----
From: Edin Dizdarevic [mailto:edin.dizdarevic at ...7509...] 
Sent: Monday, August 16, 2004 11:11 AM
To: Gross, Mark
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Gigabit and Snort

Hi,

sorry, but we had this several times now. There's nothing said before
not applying to your setup. You'll have to take barnyard or try to log
in unified mode at least for your tests first. Also use another libpcap
provided by Phil Wood.

If you have more than one machine you may want to split the traffic you
observe using BPF.

Regards,
Edin

Gross, Mark wrote:

> Hello List,
> 
> 
> 
> I am having a few problems with losing packets at high speeds. First
> a bit about the hardware. Assume that all connections are fiber.


-- 
Edin Dizdarevic


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list