[Snort-users] Gigabit Snort

Noller, Gregory Gregory.Noller at ...12316...
Mon Aug 23 09:17:10 EDT 2004


I have several 100MB circuits feeding into a gigabit switch, via taps, and
mirrored to a single gigabit port that leads to an 800 MHz server running
Linux 8.x and Snort 2.0.  Internal traffic, lots of traffic, it handles the
load fine.  Even doing some V-LAN stuff.  It's not rocket science, as long
as you have a good network guru to handle the switches and taps.  Output via
dedicated 100mb line to mysql db on a dedicated server.  Total of 11 snort
sensors 3 are Gigabit.

Greg
Wichita





<snip>

From: "Kreimendahl, Chad J" <Chad.Kreimendahl at ...4716...>
> To: "TRIBUT Mickael OF/DTRS" <mickael.tribut at ...11801...>,
>         <snort-users at lists.sourceforge.net>
> 
> 
> Snort should handle all the bandwidth you can push at it, 
> assuming you =
> have the right hardware (and also software [OS, etc])=20
> 
> -----Original Message-----
> From: TRIBUT Mickael OF/DTRS 
> [mailto:mickael.tribut at ...11801...]=20

<snip>
> I want to configure a snort sond on a gigabit bandwidth and I 
> know that =
> snort only support 100 mb
> 
 
> 
> MickaelTribut
> OrangeFrance
> DTRS/DCE/IT&P/DIP
> 1, rue du Centre
> 93196 Noisy-le-Grand Cedex
> T=E9l. : 01 48 15 75 85=20
> Mail : mickael.tribut at ...11801...
> 





More information about the Snort-users mailing list