[Oisf-users] need hints, tips with suricata as IPS

[Stefan Sabolowitsch]

Hi all,
too first thanks for suricata.
I need hints, tips with suricata <-> Hardware as IPS.

My Hardware spec:
1 x Xenon QuatCore
8GB RAM
4 x dual Intel NIC (for bridging)
2 x WD VelociRaptor 500GB

My questions in addition:
-What for an OS (linux, FreeBSD)? First test with Linux, FreeBSD were successful.
-Which start parameter for suricata is the best?
-Wich option the best, pfring or netmap http://info.iet.unipi.it/~luigi/netmap/ ?
-A goal is to be, suricata -> barnyard2,sguil -> snortsam (pf or iptables)

thanks for your time.

Stefan


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20120405/42806fa0/attachment-0002.html>