[Snort-users] Snort CPU usage

Josh Bitto jbitto at ...16055...
Mon Feb 18 17:39:01 EST 2013


I'm bumping this back up.....I'm curious to hear. Is snort still only single threaded on a CPU or have newer versions allowed it to run on more than one core?

I'm wanting to make sure I have enough machine to run my WAN and about 4 VLANs

Each would have an interface to monitor, but where I'm stuck is the rule sets...

I read online where a great determining calculation is this...
1 CPU = (1000 signatures ) * (500 megabits network traffic)

So my question would be....if each interface has its own rule set aside from the main download of rules. Does that factor in?



From: Josh Bitto [mailto:jbitto at ...16055...]
Sent: Monday, February 18, 2013 8:29 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Snort CPU usage

Does anyone have a url or program where I can calculate hardware requirements for running snort on my network?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130218/fd56aaaa/attachment.html>


More information about the Snort-users mailing list