[Snort-users] RE: Help me choose which system to run snort on .

Darden, Patrick S. darden at ...710...
Tue Nov 30 07:16:09 EST 2004


	--hyperthreading doesn't work very well with linux, unless the
kernel and apps are specifically written for it
	--even if the kernel and apps are multi-threaded, hyperthreading
only adds 12-15% performance
	--the two 1GHZ processors are probably PIIIs and the 2GHZ cpu is
probably a PIV, a 1GHZ PIII than a 2GHZ PIV; 2 1GHZ PIIIs are much faster
than a single 2GHZ PIV
	--if the 2GHZ cpu is a Xeon it is a bit better....
	--the 2GHZ system may have faster ram, dual-channel ram, 64bit
buses, etc.

I would personally go with the dual PIII 1GHZ system.  PIIIs were much
better cpus for the most part.

--Patrick Darden
--cisco, firewall, vpn, unix, linux

-----Original Message-----
From: Jim Richards [mailto:jrichards at ...11930...]
Sent: Tuesday, November 30, 2004 9:59 AM
To: snort-users at lists.sourceforge.net
Cc: BABasselgia at ...12104...
Subject: [Snort-users] RE: Help me choose which system to run snort on.

2, 1GHz Processors (P3)= 1.6GHz (you loose approx 20% by going multiple

1, 2GHz Processor (P4) = This is a P4 which means it should have

If you go dual, you can process 2 simultaneous threads at a total of 1.6GHz.
If you go single 2GHz, you still get 2 simultaneous threads, but at 2GHz.



Message: 1
From: "Basselgia, Barry A Mr (NAF Atsugi)" <BABasselgia at ...12104...>
To: snort-users at lists.sourceforge.net
Date: Tue, 30 Nov 2004 15:05:46 +0900
Subject: [Snort-users] Help me choose which system to run snort on.

I'm building an IDS network, I'll end up with about 6 snort sensors feeding
back to a snort server.

The snort server will be running:

open aanval

There are 2 servers available and I've been given my choice.  Basically, the
servers are the same with regard to memory and hard drives.  The difference
is that one is a dual processor system with 2 x 1 GHz processors and the
other is a single processor system with a 2 GHz processor.

I'm kind of leaning towards the dual processor system, but I wanted to see
if anyone had any suggestions before I made up my mind.

SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list