Snort mailing list archives

Re: Snort CPU usage


From: Josh Bitto <jbitto () onlineschool ca>
Date: Mon, 18 Feb 2013 14:39:01 -0800

I'm bumping this back up.....I'm curious to hear. Is snort still only single threaded on a CPU or have newer versions 
allowed it to run on more than one core?

I'm wanting to make sure I have enough machine to run my WAN and about 4 VLANs

Each would have an interface to monitor, but where I'm stuck is the rule sets...

I read online where a great determining calculation is this...
1 CPU = (1000 signatures ) * (500 megabits network traffic)

So my question would be....if each interface has its own rule set aside from the main download of rules. Does that 
factor in?



From: Josh Bitto [mailto:jbitto () onlineschool ca]
Sent: Monday, February 18, 2013 8:29 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort CPU usage

Does anyone have a url or program where I can calculate hardware requirements for running snort on my network?


------------------------------------------------------------------------------
The Go Parallel Website, sponsored by Intel - in partnership with Geeknet, 
is your hub for all things parallel software development, from weekly thought 
leadership blogs to news, videos, case studies, tutorials, tech docs, 
whitepapers, evaluation guides, and opinion stories. Check out the most 
recent posts - join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: