Re: Snort performance on Solaris 10 x86

[Jason <security () brvenik com>]

I gave up on slowaris performance a long time ago. It is good for some
things but never has it been for snort.

sekure wrote:
> Bump...
>
> Anybody have any opinion?  Anyone want to take a guess?
>
> ---------- Forwarded message ----------
> From: sekure <sekure () gmail com>
> Date: Oct 12, 2007 1:40 PM
> Subject: Snort performance on Solaris 10 x86
> To: Snort Users <snort-users () lists sourceforge net>
>
>
> Has anyone done any benchmarking for snort performance on Solaris 10
> x86 vs. Linux or BSD?
>
> I am currently running snort 2.4.2 on RedHat on 3 year old HP DL360
> with Phil Wood's mmapped libpcap library, and handling 30-40 Mbps
> pretty comfortably.  In the past I had problems capturing 1/10th of
> that on Solaris 8 with comparable Sparc hardware, CPU would go through
> the roof, packets dropped on the floor.
>
> The hardware warranty is about to expire and I am going to have to
> upgrade. The Unix admins at my company are pushing me to migrate to
> Solaris 10 x86, since it's easier for them to maintain, and personally
> i don't mind, IF the performance is there.  But I can't seem to find
> anything on this list or anywhere for that matter with regards to
> Snort performance on Solaris 10.
>
> I can certainly undertake the testing myself, but I thought I'd ask
> the list first.  So, anyone running Snort on Solaris 10 at any
> significant speeds? Any special tweeks to make it work? Or should I
> just stick with what works?
>
> Thanks in advance.
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users