[Snort-users] Snort performance on Solaris 10 x86
roesch at ...1935...
Tue Oct 16 10:34:07 EDT 2007
-----BEGIN PGP SIGNED MESSAGE-----
I haven't looked at Solaris performance in years but as I recall the
packet acquisition on the OS was very slow compared to linux and the
On Oct 16, 2007, at 8:45 AM, sekure wrote:
> Anybody have any opinion? Anyone want to take a guess?
> ---------- Forwarded message ----------
> From: sekure <sekure at ...11827...>
> Date: Oct 12, 2007 1:40 PM
> Subject: Snort performance on Solaris 10 x86
> To: Snort Users <snort-users at lists.sourceforge.net>
> Has anyone done any benchmarking for snort performance on Solaris 10
> x86 vs. Linux or BSD?
> I am currently running snort 2.4.2 on RedHat on 3 year old HP DL360
> with Phil Wood's mmapped libpcap library, and handling 30-40 Mbps
> pretty comfortably. In the past I had problems capturing 1/10th of
> that on Solaris 8 with comparable Sparc hardware, CPU would go through
> the roof, packets dropped on the floor.
> The hardware warranty is about to expire and I am going to have to
> upgrade. The Unix admins at my company are pushing me to migrate to
> Solaris 10 x86, since it's easier for them to maintain, and personally
> i don't mind, IF the performance is there. But I can't seem to find
> anything on this list or anywhere for that matter with regards to
> Snort performance on Solaris 10.
> I can certainly undertake the testing myself, but I thought I'd ask
> the list first. So, anyone running Snort on Solaris 10 at any
> significant speeds? Any special tweeks to make it work? Or should I
> just stick with what works?
> Thanks in advance.
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems? Stop.
> Now Search log events and configuration files using AJAX and a
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
Martin Roesch - Founder/CTO, Sourcefire Inc. - +1-410-290-1616
Sourcefire - Security for the Real World - http://www.sourcefire.com
Snort: Open Source IDP - http://www.snort.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
-----END PGP SIGNATURE-----
More information about the Snort-users