Re: [Snort-users] IDS and Firewall

Hello

Im talking from Security point of view
which is better
1) to run it on a separate machine
2) or on the same Firewall machine

Waiting for your reply

Kind Regards
Samer
--- Alejandro Flores
<alejandro.flores@triforsec.com.br> wrote:
> Marcin,
>
> Try using barnyard. It will help.
> I have snort+barnyard+mysql running on 2.66 with
> 98mb ram for days.
>
> Regards,
> Alejandro Flores
>
> Ps. I have done some 'tests' comparing MySQL and
> PostgreSQL with snort.
> Single CPU and 4 cpu. MySQL run fast as hell. I
> know, I'm not an expert
> on PostgreSQL and the only improvement I've done was
> using '-F' which
> disables fsync() calls each insert. I used MySQL
> with default
> configuration.
>
>
> > Hi,
> >
> > Today I used AMD K6 with 128 megs of RAM
> > I configured Snort and PostgreSQL server on it
> > and it died after 10 min. I suggest using other
> machine
> >
> > ----------------
> > Best Regards, M.
> >
> >
> >
> >
> > ----- Original Message -----
> > From: "Kernel The Canine"
> <kernel_canine@yahoo.com>
> > To: <snort-users@lists.sourceforge.net>
> > Sent: Wednesday, April 28, 2004 9:34 AM
> > Subject: [Snort-users] IDS and Firewall
> >
> >
> > > Hello
> > >
> > > I'm running shorewall.net as my firewall, on
> RedHat
> > > linux box version 9.0
> > >
> > > Is it recommended to run on it snort (on the
> same box)
> > > or should I run it on another computer
> > >
> > > Waiting for replies
> > >
> > > Kind Regards
> > > Kernel The Canine
> > >
> > >
> > >
> > >
> > > __________________________________
> > > Do you Yahoo!?
> > > Win a $20,000 Career Makeover at Yahoo! HotJobs
>
> > >
> http://hotjobs.sweepstakes.yahoo.com/careermakeover
> > >
> > >
> > >
>
-------------------------------------------------------
> > > This SF.Net email is sponsored by: Oracle 10g
> > > Get certified on the hottest thing ever to hit
> the market... Oracle 10g.
> > > Take an Oracle 10g class now, and we'll give you
> the exam FREE.
> > >
>
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users@lists.sourceforge.net
> > > Go to this URL to change user options or
> unsubscribe:
> > >
>
https://lists.sourceforge.net/lists/...fo/snort-users
> > > Snort-users list archive:
> > >
>
http://www.geocrawler.com/redir-sf.p...st=snort-users
> > >
> >
> >
> >
>
-------------------------------------------------------
> > This SF.Net email is sponsored by: Oracle 10g
> > Get certified on the hottest thing ever to hit the
> market... Oracle 10g.
> > Take an Oracle 10g class now, and we'll give you
> the exam FREE.
> >
>
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users@lists.sourceforge.net
> > Go to this URL to change user options or
> unsubscribe:
> >
>
https://lists.sourceforge.net/lists/...fo/snort-users
> > Snort-users list archive:
> >
>
http://www.geocrawler.com/redir-sf.p...st=snort-users
> >
>
>
>
>
> --TriForSec
> http://www.triforsec.com.br/
>





__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs
http://hotjobs.sweepstakes.yahoo.com/careermakeover


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users