[techtalk] Snort - Sensor and Analyst console HW config

[Angela Nash]

Snort by itself doesn't seem to use a lot of CPU.  What eats up CPU on my
Snort system is the snortsnarf tool that takes the log information and
outputs it to HTML reports.  A "reasonably fast" system like a Pentium II or
higher should work just fine.  It's not a memory hog either.  If you are
building this box put in 128MB since it's cheap right now and you should be
fine.

Jason

-----Original Message-----
From: Subba Rao [mailto:subba9 at home.com]
Sent: Friday, March 23, 2001 4:50 AM
To: techtalk at linuxchix.org
Subject: [techtalk] Snort - Sensor and Analyst console HW config


Hello,

I have posted the same question to Snort mailing list and did not
get a satisfactory answer.

I am planning to deploy a Snort IDS for a client of mine. The Internet
connection is at 256K to their ISP. What kind of processor and memory would
be
recommended for a sensor with 4 NICs monitoring about 3 DMZs? There will be
only one analysis system. What kind of processor and memory is required on
this
system?

Hopefully someone here has configured HW for Snort in production.

Thank you in advance for any input.
-- 

Subba Rao
subba9 at home.com
http://members.home.net/subba9/

_______________________________________________
techtalk mailing list
techtalk at linuxchix.org
http://www.linux.org.uk/mailman/listinfo/techtalk