Eduardo Silva wrote: > Sorry for the lack of information, let me fix this :) > > I uploaded my system/network graphs of today, so i think that it can > help a bit > They are here: http://photography.eduardosilva.eti.br/endian/ > > My system specs: > > EFW 2.2rc3 > 512MB RAM > Disk: IDE 160GB > CPU: Pentium4, but i'm not sure if it is celeron or not. >
> Snort off: > > > edua...@hades:~$ scp > edua...@xx.xx.xx.xx:/home/public/html/imagens/CentOS-5.1-i386-bin-DVD.iso . > edua...@xx.xx.xx.xx's password: > CentOS-5.1-i386-bin-DVD.iso > > 1% 46MB 1.7MB/s 34:54 etaedua...@hades:~$ > edua...@hades:~$ > > Snort ON: > edua...@hades:~$ scp > edua...@xx.xx.xx.xx:/home/public/html/imagens/CentOS-5.1-i386-bin-DVD.iso . > edua...@xx.xx.xx.xx's password: > CentOS-5.1-i386-bin-DVD.iso > > 0% 35MB 772.6KB/s 1:20:14 etaedua...@hades:~$ > edua...@hades:~$ > > > Its a nice increase of speed but.... still not being enought. > This copy was made from orange to green segment... it was supposed to go > until 10MB/s isnt it? > > I will see how it will run tomorrow with the office running... > > > 10MB/s or 10Mb/s ethernet is generally in terms of 10Mb/s or 100Mb/s and there is a difference between Mb and MB [bits vs bytes] so if you are after Mb is about *8 or 1.7 * 8 = 13.6Mb/s which still seems a little slow over a LAN connection [but not horrible] but perhaps there are other factors like the speed of the server taking the data? I would say this I almost never recomment running Snort and Ntop on the firewall unless you really have a good server. P4 with 512MB is not good enough to handle these processes because they do packet inspection. That is they look at every single packet that comes across the ethernet connection which is a lot of processing. Turn them off leave them off. If you require that kind of protect or data get a better box. -Mike ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ Efw-user mailing list Efw-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/efw-user