[Snort-users] inline snort at 400 mb ?

Roger Harris roger.harris at ...13986...
Mon Nov 13 16:19:55 EST 2006

I just joined this list and the first messages I saw were flames 
regarding not sending advertisements, but since you asked...

There is a company called Endace that makes both PCI cards and 
appliances that can run up to 10GigE, although their model is currently 
to be tapped into the connection and not literally in line.  Their 
hardware is integrated with SNORT and offloads packet matching from the 
CPU and matches in hardware/writes directly to memory.  If you compile 
SNORT from source you'll see the "--with-DAG" option and that's their 
proprietary technology.

More info at my site:


Roger Harris

James Affeld wrote:
> Was wondering if you know of anyone who has used snort for line-rate
> deep inspection on networks up to about 400 mb data flow.
> And if so on what hardware.
> ____________________________________________________________________________________
> Do you Yahoo!?
> Everyone is raving about the all-new Yahoo! Mail beta.
> http://new.mail.yahoo.com
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

More information about the Snort-users mailing list