[Snort-users] Help me choose which system to run snort on.

Harper, Patrick patrick.harper at ...11593...
Tue Nov 30 06:25:00 EST 2004

Good point, no more answering e-mail at 1 am for me :)

-----Original Message-----
From: Alex Butcher, ISC/ISYS [mailto:Alex.Butcher at ...11254...] 
Sent: Tuesday, November 30, 2004 3:28 AM
To: Harper, Patrick; Basselgia, Barry A Mr (NAF Atsugi);
snort-users at lists.sourceforge.net
Subject: RE: [Snort-users] Help me choose which system to run snort on.

--On 30 November 2004 00:58 -0600 "Harper, Patrick" 
<patrick.harper at ...11593...> wrote:

> Snort is not multi processor aware, I would go with he faster box.
> -----Original Message-----
> From: Basselgia, Barry A Mr (NAF Atsugi)
> [mailto:BABasselgia at ...12104...]
> Sent: Tuesday, November 30, 2004 12:06 AM
> To: snort-users at lists.sourceforge.net
> Subject: [Snort-users] Help me choose which system to run snort on.
> I'm building an IDS network, I'll end up with about 6 snort sensors
> feeding
> back to a snort server.
> The snort server will be running:
> Linux
> mysql
> apache
> snort
> barnyard
> acid/base
> open aanval
> There are 2 servers available and I've been given my choice.
> the
> servers are the same with regard to memory and hard drives.  The
> difference
> is that one is a dual processor system with 2 x 1 GHz processors and
> other is a single processor system with a 2 GHz processor.
> I'm kind of leaning towards the dual processor system, but I wanted to
> see
> if anyone had any suggestions before I made up my mind.

Why are you planning on running Snort on the backend database server,
that you have 6 sensors already?

Assuming that this is unnecessary, I'd agree with the OP's assessment
the dual processor machine would be best; hopefully Apache and the PHP
will end up running on one processor, and MySQL and barnyard on the

> Thanks,
> Barry

Best Regards,
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9

This electronic message, including any attachments, is confidential and intended solely for use of the intended recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have received this message in error, please delete it and notify the sender immediately. 

More information about the Snort-users mailing list