[techtalk] Snort - Sensor and Analyst console HW config

Angela Nash Chick at the-nashes.net
Fri Mar 23 18:36:05 EST 2001

Snort by itself doesn't seem to use a lot of CPU.  What eats up CPU on my
Snort system is the snortsnarf tool that takes the log information and
outputs it to HTML reports.  A "reasonably fast" system like a Pentium II or
higher should work just fine.  It's not a memory hog either.  If you are
building this box put in 128MB since it's cheap right now and you should be


-----Original Message-----
From: Subba Rao [mailto:subba9 at home.com]
Sent: Friday, March 23, 2001 4:50 AM
To: techtalk at linuxchix.org
Subject: [techtalk] Snort - Sensor and Analyst console HW config


I have posted the same question to Snort mailing list and did not
get a satisfactory answer.

I am planning to deploy a Snort IDS for a client of mine. The Internet
connection is at 256K to their ISP. What kind of processor and memory would
recommended for a sensor with 4 NICs monitoring about 3 DMZs? There will be
only one analysis system. What kind of processor and memory is required on

Hopefully someone here has configured HW for Snort in production.

Thank you in advance for any input.

Subba Rao
subba9 at home.com

techtalk mailing list
techtalk at linuxchix.org

More information about the Techtalk mailing list