RE: Help me choose which system to run snort on.

["Harper, Patrick" <patrick.harper () phns com>]

Good point, no more answering e-mail at 1 am for me :)

 
-----Original Message-----
From: Alex Butcher, ISC/ISYS [mailto:Alex.Butcher () bristol ac uk] 
Sent: Tuesday, November 30, 2004 3:28 AM
To: Harper, Patrick; Basselgia, Barry A Mr (NAF Atsugi);
snort-users () lists sourceforge net
Subject: RE: [Snort-users] Help me choose which system to run snort on.



--On 30 November 2004 00:58 -0600 "Harper, Patrick" 
<patrick.harper () phns com> wrote:

> Snort is not multi processor aware, I would go with he faster box.
>
> -----Original Message-----
> From: Basselgia, Barry A Mr (NAF Atsugi)
> [mailto:BABasselgia () atsugi navy mil]
> Sent: Tuesday, November 30, 2004 12:06 AM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Help me choose which system to run snort on.
>
> I'm building an IDS network, I'll end up with about 6 snort sensors
> feeding
> back to a snort server.
>
> The snort server will be running:
>
> Linux
> mysql
> apache
> snort
> barnyard
> acid/base
> open aanval
>
> There are 2 servers available and I've been given my choice.
Basically,
> the
> servers are the same with regard to memory and hard drives.  The
> difference
> is that one is a dual processor system with 2 x 1 GHz processors and
the
> other is a single processor system with a 2 GHz processor.
>
> I'm kind of leaning towards the dual processor system, but I wanted to
> see
> if anyone had any suggestions before I made up my mind.

Why are you planning on running Snort on the backend database server,
given 
that you have 6 sensors already?

Assuming that this is unnecessary, I'd agree with the OP's assessment
than 
the dual processor machine would be best; hopefully Apache and the PHP
apps 
will end up running on one processor, and MySQL and barnyard on the
other.

> Thanks,
> Barry

Best Regards,
Alex.
-- 
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9








Disclaimer:
This electronic message, including any attachments, is confidential and intended solely for use of the intended 
recipient(s). This message may contain information that is privileged or otherwise protected from disclosure by 
applicable law. Any unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. If you have 
received this message in error, please delete it and notify the sender immediately. 





-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users