[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-users
Subject:    RE: [Snort-users] Help me choose which system to run snort on.
From:       "Harper, Patrick" <patrick.harper () phns ! com>
Date:       2004-11-30 14:23:56
Message-ID: 14A490F0F982C641B8676869ADE5E5A50299113F () phnsdalnt09 ! corp ! phns ! com
[Download RAW message or body]

Good point, no more answering e-mail at 1 am for me :)

 
-----Original Message-----
From: Alex Butcher, ISC/ISYS [mailto:Alex.Butcher@bristol.ac.uk] 
Sent: Tuesday, November 30, 2004 3:28 AM
To: Harper, Patrick; Basselgia, Barry A Mr (NAF Atsugi);
snort-users@lists.sourceforge.net
Subject: RE: [Snort-users] Help me choose which system to run snort on.



--On 30 November 2004 00:58 -0600 "Harper, Patrick" 
<patrick.harper@phns.com> wrote:

> Snort is not multi processor aware, I would go with he faster box.
> 
> -----Original Message-----
> From: Basselgia, Barry A Mr (NAF Atsugi)
> [mailto:BABasselgia@atsugi.navy.mil]
> Sent: Tuesday, November 30, 2004 12:06 AM
> To: snort-users@lists.sourceforge.net
> Subject: [Snort-users] Help me choose which system to run snort on.
> 
> I'm building an IDS network, I'll end up with about 6 snort sensors
> feeding
> back to a snort server.
> 
> The snort server will be running:
> 
> Linux
> mysql
> apache
> snort
> barnyard
> acid/base
> open aanval
> 
> There are 2 servers available and I've been given my choice.
Basically,
> the
> servers are the same with regard to memory and hard drives.  The
> difference
> is that one is a dual processor system with 2 x 1 GHz processors and
the
> other is a single processor system with a 2 GHz processor.
> 
> I'm kind of leaning towards the dual processor system, but I wanted to
> see
> if anyone had any suggestions before I made up my mind.

Why are you planning on running Snort on the backend database server,
given 
that you have 6 sensors already?

Assuming that this is unnecessary, I'd agree with the OP's assessment
than 
the dual processor machine would be best; hopefully Apache and the PHP
apps 
will end up running on one processor, and MySQL and barnyard on the
other.

> Thanks,
> Barry

Best Regards,
Alex.
-- 
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9








Disclaimer:
This electronic message, including any attachments, is confidential and intended \
solely for use of the intended recipient(s). This message may contain information \
that is privileged or otherwise protected from disclosure by applicable law. Any \
unauthorized disclosure, dissemination, use or reproduction is strictly prohibited. \
If you have received this message in error, please delete it and notify the sender \
immediately. 





-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list


[prev in list] [next in list] [prev in thread] [next in thread]