Snort mailing list archives

Re: Hardware Requirement for Snort NIDS/NIPS Engine


From: Joel Esler <jesler () sourcefire com>
Date: Mon, 18 Mar 2013 10:04:09 -0400

On Mar 18, 2013, at 9:46 AM, Kaushal Shriyan <kaushalshriyan () gmail com> wrote:

Can someone please suggest hardware requirements for Snort NIDS/NIPS Engine specifically CPU cycles, Storage space 
and Memory size and also any RAID Level to be configured if there are multiple hard disk device attached to the 
server.

This depends on how many rules you are running, if Snort is configured to be ran in multi-core mode, how much traffic 
you have passing the system, size of packets that is in the traffic.  As far as RAID, that's up to you.


Also help me about the number of network NIC port requirement which needs to be set in promiscuous mode.

Depends on how many links you are trying to sniff.  I generally recommend one port for management, and then one port 
for each port in promiscuous mode.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_mar
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: