Re: Snort IDS capabilities

From: Dragos Ruiu (dr@kyx.net)
Date: 09/19/02 

From: Dragos Ruiu <dr@kyx.net>
To: Sébastien Desse <sdesse@euresys.fr>, <focus-ids@securityfocus.com>
Date: Thu, 19 Sep 2002 17:36:08 +0000

On September 19, 2002 09:37 pm, Sébastien Desse wrote:
> Hi,
>
> Can somebody tell me where I can find speed/hardware comparaison for snort
> IDS ?
>
> What are hardware requirements for a Snort dedicated computer sniffing
> 100Mbps and logging into a remote ACID database ?

There are some hints in the FAQ.

short answer: anything faster than a celeron 500 should do depending on
 how fancy you wanna get.... 

-- 
dr@kyx.net   pgp: http://dragos.com/kyxpgp
Advance CanSecWest/03 registration available: http://cansecwest.com
"The question of whether computers can think is like the question
  of whether submarines can swim." --Edsger Wybe Dijkstra 1930-2002

Relevant Pages

  • Re: Value of "richer" signatures?
    ... Snort, Dragon, and NFR, and I can tell you that they ... Here's an example of how the newer IDS signatures help ... Let's say you are using a simple packet grepping IDS ... > an FTP connection). ...
    (Focus-IDS)
  • Re: ids inquisition
    ... Subject: ids inquisition ... Snort isn't one of them. ... Brian Caswell - CSV output plugin, ... Christian Lademann - active response, ...
    (Focus-IDS)
  • RE: IDS recommendations
    ... Subject: IDS recommendations ... Snort is a relatively raw tool and that usually adds ... >> I can appreciate your comments on the ISS product. ...
    (Focus-IDS)
  • RE: "Free" IDS
    ... I am very surprised noone mentioned Demarc PureSecure IDS solution. ... It cost less than 2000.00 and it runs off of the snort engine and has a big ... if you want to learn snort then just read up on it. ...
    (Focus-IDS)
  • RE: Test tools for IDS
    ... "Sneeze" is great for Snort IDS. ... Captus Networks IPS 4000 ... Intrusion Prevention and Traffic Shaping Technology to: ...
    (Focus-IDS)
Quantcast