Snort will need as much processor and RAM as you can throw at it, particularly if you're snorting in both directions.
A P3-1000 with 512 Megs of RAM will easily meet a corporate office's needs for say 50 users. Where you need more is: 1) Snort. (Plan that this will increase the load by *10) (yes, I'm serious). 2) VPNs. I'd say add an extra 50 MHz and 64 Megs RAM per concurrent connection.. With a really busy connection you will not find enough processing power to handle Snort in both directions. Period. My suggestions for VPNs are likely on the high side, but better safe than sorry, I come from a corporate environment, not home use. We were never able to find enough processing power to use Snort in our environment, not even in 1 direction. That was prior to the Dual Cores however. Also we connected 5 offices via VPNs, totaling about 130 people. All traffic on our e10 passed through that box. We bursted occasionally, but never really filled the full 10 megs to capacity for any length of time. Kev. -----Original Message----- From: Neil Bower [mailto:[EMAIL PROTECTED] Sent: Saturday, July 28, 2007 1:42 PM To: [email protected] Subject: [clug-talk] IPcop Usage I'm looking for feedback from people using IPcop to get a comparision of the differences in usage. What hardware specs are you using for IPcop? (ie processor specs and amount of memory) If you are using additional modules or add-ons to the base install, what are they? How much memory is your system using including swap? What is your basic usage for this box? (ie home network, small office, large office, supporting mail, web sites, number of users, etc.) I have an Intel 1.60GHz with 256Mb of memory plus 32Mb of swap. Running a base install with snort, I'm using about 200Mb of memory. This box is for personal use - no web services, no e-mail, etc. Any feedback is welcomed. Cheers! Neil B. _______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying -- NOTICE: Information contained in this e-mail, including all attachments, may be CONFIDENTIAL, and subject to trade secret protection.It may only be used by the intended recipient, as authorized by the sender. If you are not an intended recipient, any use, dissemination, distribution or copying of any information is PROHIBITED. If received in error, please notify the sender by return e-mail, permanently delete this message, including all attachments, and destroy all paper and electronic copies. Email Filtering: Inbound e-mails are filtered and, if identified as potentially containing inappropriate material, will be audited. _______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying
