[Snort-users] Snort Hardware

Matt Jonkman jonkman at ...4024...
Wed May 27 11:08:58 EDT 2009


I did a performance test on the Endace Ninjabox line a while ago and was
impressed. I'd look closely at those. Reasonable price for what they can
do. Just make sure you understand the technology to best use it and run
a sane ruleset, they'll perform!

Matt

Jefferson, Shawn wrote:
> Hi,
>  
> I’m looking into beefing up my snort sensor system, and one of the
> things I’m looking at is a aggregating network tap, to take the four wan
> links I’m currently monitoring and sending that traffic to the snort
> sensor NIC.  I’m concerned that the snort sensor won’t be able to handle
> the traffic (which would be below 1gb/s but still could be quite high
> (up to 400 gb/s) maybe.  I’m in a position to be able to buy new
> hardware, and was wondering what you’d recommend.  I most likely will
> need to buy an HP server.  What about the Endace NICs?  Anyone using
> them with Snort, and what’s your experience been if so ?
>  
> Thanks,
> Shawn
>  
> 
> 
> ------------------------------------------------------------------------
> 
> ------------------------------------------------------------------------------
> Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT 
> is a gathering of tech-side developers & brand creativity professionals. Meet
> the minds behind Google Creative Lab, Visual Complexity, Processing, & 
> iPhoneDevCamp as they present alongside digital heavyweights like Barbarian 
> Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc






More information about the Snort-users mailing list