[Snort-users] Distro of choice

Jason Wallace jason.r.wallace at ...11827...
Tue May 4 09:33:51 EDT 2010


Check out Gentoo Linux. The thing that makes Gentoo great is that it
is a source based disto. This means that the package management system
downloads the actual source tarball and complies it for your system,
as opposed to using precompiled binaries designed to run on any i686.
This lets you compile applications with only the options you want and
with optimizations specific for your CPU. IMO this results in much
better performance. This also reduces the over all size of your
system. Why use a binary from an RPM that is compiled with support for
a bunch of libraries your never going to use, but you need to install
to satisfy the dependancies for that precompiled binary?

http://www.gentoo.org/main/en/about.xml

thx,
Wally

On Tue, May 4, 2010 at 8:35 AM, Alex Kirk <akirk at ...1935...> wrote:
> The reason this is an intelligent recommendation, BTW, is that Snort really
> doesn't care which distro you use, at the end of the day. As long as
> libpcap, libpcre, etc. are installed and current, the rest of userland is
> pretty much irrelevant to how Snort functions. You're way more likely to see
> a difference based on the type of network hardware you're using.
>
> On Tue, May 4, 2010 at 7:34 AM, Nerijus Krukauskas <nkrukauskas at ...11827...>
> wrote:
>>
>> On 2010-05-04, BrainStomp Snort <snort at ...14862...> wrote:
>> > What is the current distro of choice for deployment of snort?
>>
>> The long standing recommendation is to stick with distro you know best.
>>
>> --
>> http://nk99.org/
>>
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> Snort-users mailing list
>> Snort-users at lists.sourceforge.net
>> Go to this URL to change user options or unsubscribe:
>> https://lists.sourceforge.net/lists/listinfo/snort-users
>> Snort-users list archive:
>> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>
> --
> Alex Kirk
> AEGIS Program Lead
> Sourcefire Vulnerability Research Team
> +1-410-423-1937
> alex.kirk at ...1935...
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>




More information about the Snort-users mailing list