Re: making snort go fast

[Frank Knobbe <frank () knobbe us>]

On Thu, 2008-02-14 at 20:01 -0500, David Williams wrote:
> Yeah, I'm spiking at over 7G, average run rate during prime hours of 1
> to 2G, capability in times of crisis up to 10G.  Detection mode, not
> inline. Inline may/will happen (depending on who you ask), but only
> with a limited ruleset that we generate internally.  So, my question
> returns.... anybody ever tested any of the platforms below?

Why not get multiple sensors and spread your load across them?

-Frank

Attachment: signature.asc
Description: This is a digitally signed message part

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users