<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I am thinking mostly is just browsing the web. Some youtubing is also possible.<div>Not much file transferring.<br><br><div>> Date: Wed, 18 Mar 2015 22:56:12 +0100<br>> Subject: Re: [Oisf-users] HTTP Sessions and resource estimation<br>> From: petermanev@gmail.com<br>> To: coolyasha@hotmail.com<br>> CC: oisf-users@lists.openinfosecfoundation.org<br>> <br>> On Wed, Mar 18, 2015 at 10:14 PM, Yasha Zislin <coolyasha@hotmail.com> wrote:<br>> > Not sure if this question was already asked or not.<br>> > Let's say I have pure http traffic (like 99% of the whole traffic). The pipe<br>> > is 10 gigs but utilization is couple of gigs but it might grow.<br>> > To my understanding, Suricata inspecting this feed would use most of its<br>> > memory on HTTP sessions.<br>> > Is there a way to estimate how much RAM (resources) I would need if<br>> > throughput and type of traffic is known?<br>> ><br>> ><br>> > I can definitely provide some config snippets of mine. Just let me know<br>> > which ones.<br>> ><br>> <br>> What does the average session look like - do you have big file/video<br>> transfers for example?<br>> <br>> > Thank you.<br>> ><br>> > _______________________________________________<br>> > Suricata IDS Users mailing list: oisf-users@openinfosecfoundation.org<br>> > Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/<br>> > List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users<br>> > Training now available: http://suricata-ids.org/training/<br>> <br>> <br>> <br>> -- <br>> Regards,<br>> Peter Manev<br></div></div> </div></body>
</html>