Eduardo Silva wrote:
> Sorry for the lack of information, let me fix this :)
> 
> I uploaded my system/network graphs of today, so i think that it can 
> help a bit
> They are here: http://photography.eduardosilva.eti.br/endian/
> 
> My system specs:
> 
> EFW 2.2rc3
> 512MB RAM
> Disk: IDE 160GB
> CPU: Pentium4, but i'm not sure if it is celeron or not.
> 

> Snort off:
> 
> 
> edua...@hades:~$ scp 
> edua...@xx.xx.xx.xx:/home/public/html/imagens/CentOS-5.1-i386-bin-DVD.iso .
> edua...@xx.xx.xx.xx's password:
> CentOS-5.1-i386-bin-DVD.iso                                                   
>                                                
> 1%   46MB   1.7MB/s   34:54 etaedua...@hades:~$
> edua...@hades:~$
> 
> Snort ON:
> edua...@hades:~$ scp 
> edua...@xx.xx.xx.xx:/home/public/html/imagens/CentOS-5.1-i386-bin-DVD.iso .
> edua...@xx.xx.xx.xx's password:
> CentOS-5.1-i386-bin-DVD.iso                                                   
>                                                
> 0%   35MB 772.6KB/s 1:20:14 etaedua...@hades:~$
> edua...@hades:~$
> 

> 
> Its a nice increase of speed but.... still not being enought.
> This copy was made from orange to green segment... it was supposed to go 
> until 10MB/s isnt it?
> 
> I will see how it will run tomorrow with the office running...
> 
> 
>

10MB/s or 10Mb/s ethernet is generally in terms of 10Mb/s or 100Mb/s and 
there is a difference between Mb and MB [bits vs bytes] so if you are 
after Mb is about *8 or 1.7 * 8 = 13.6Mb/s which still seems a little 
slow over a LAN connection [but not horrible] but perhaps there are 
other factors like the speed of the server taking the data?

I would say this I almost never recomment running Snort and Ntop on the 
firewall unless you really have a good server. P4 with 512MB is not good 
enough to handle these processes because they do packet inspection. That 
is they look at every single packet that comes across the ethernet 
connection which is a lot of processing. Turn them off leave them off. 
If you require that kind of protect or data get a better box.

-Mike

------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H
_______________________________________________
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to