[Snort-users] Snort, VM or physical server ?

Rhoades.Jon rhoades.jon at ...15614...
Thu Jun 16 12:12:01 EDT 2016

Depends. I have both in my deployment.

How good is your vhost which hosts the vm vs how good is your physical box?

How much traffic is the snort machine going to have to handle?

In my remote offices I use vms. In my large offices I use physical machines.


On Jun 16, 2016, at 12:05 PM, Nicolas Lepolard <Nicolas.Lepolard at ...17447...<mailto:Nicolas.Lepolard at ...17447...>> wrote:


I have a simple question :

Is it better to install Snort on a virtual machine or on a physical server? And why ?

Thank you !

Nicolas Lepolard

What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports. https://urldefense.proofpoint.com/v2/url?u=http-3A__pubads.g.doubleclick.net_gampad_clk-3Fid-3D1444514421-26iu-3D_41014381&d=CwICAg&c=DsZY2bea7iNIzyp-7sZ0t0F2UfNQZUfZhEPCv_2wBI0&r=Fari4utsflXhYGdJ8-DazdLO4lSdfEG3HBveudOpN44&m=23FfSKkbtCULVMcaMfQgRx5Lwk1iOYwBfqy4PfgCpgc&s=thAiUZHyu8yFv8jxxH523WCyuvMCnk7UdK425CrQdTk&e=
Snort-users mailing list
Snort-users at lists.sourceforge.net<mailto:Snort-users at lists.sourceforge.net>
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit https://urldefense.proofpoint.com/v2/url?u=http-3A__blog.snort.org&d=CwICAg&c=DsZY2bea7iNIzyp-7sZ0t0F2UfNQZUfZhEPCv_2wBI0&r=Fari4utsflXhYGdJ8-DazdLO4lSdfEG3HBveudOpN44&m=23FfSKkbtCULVMcaMfQgRx5Lwk1iOYwBfqy4PfgCpgc&s=vvfSqPbw8qUNwY3J5rPvGtr5QugiQY74lenPO9_rW-k&e=  to stay current on all the latest Snort news!

The information contained in this email message is intended only for the use of the individual(s) to whom it is addressed and may contain information that is privileged and sensitive. If you are not the intended recipient, or otherwise have received this communication in error, please notify the sender immediately by email at the above referenced address and note that any further dissemination, distribution or copying of this communication is strictly prohibited.

The U.S. Export Control Laws regulate the export and re-export of technology originating in the United States. This includes the electronic transmission of information and software to foreign countries and to certain foreign nationals. Recipient agrees to abide by these laws and their regulations -- including the U.S. Department of Commerce Export Administration Regulations and the U.S. Department of State International Traffic in Arms Regulations -- and not to transfer, by electronic transmission or otherwise, any content derived from this email to either a foreign national or a foreign destination in violation of such laws.

More information about the Snort-users mailing list