[Oisf-users] Suricata on a tiny computer Atom D525

[David Touzeau]

Did you have a configuration on that ?
Because currently we run a core i7 with 8GB memory with suricata 2.0.10
And it consume 1.1GB of memory and 14% CPU

http://articatech.net/img/suricatai7.png








Le 15/12/2015 16:12, Victor Julien a écrit :
> On 15-12-15 16:09, David Touzeau wrote:
>> basically the Internet bandwidth should be less than 10MB and networks
>> not up to 100MB
>> runmode will be pfring with emergingthreats
> I used to run Suricata in IPS mode (nfqueue) on a N270 (single core atom
> of about the same time as your D525) on a 10/1Mbit DSL with a 10k or so
> rule ET set. It ran well.
>
> Cheers,
> Victor
>
>
>>
>> Le 15/12/2015 15:37, Andreas Herz a écrit :
>>> On 15/12/15 at 15:32, David Touzeau wrote:
>>>> Dear
>>>>
>>>> I would like to implement Suricata on this machine:
>>>> http://www.acrosser.com/Products/Networking-Appliance/MicroBox/AND-D525N2/Intel-Atom-D525---AND-D525N2.html
>>>> This is an intel *Intel D525 1.8GHz with 2GB memory.  What is the best
>>>> settings in order to not overload the machine with suricata ?
>>> Well the question is what do you want to achieve.
>>> Depending on the amount of traffic, rulest and the runmode you want to
>>> use it's totally fine to use such hardware.
>>>
>>> With more details it's also easiere to tell which settings you could
>>> optimize.
>>>
>>
>>
>> _______________________________________________
>> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
>> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
>> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>> Suricata User Conference November 4 & 5 in Barcelona: http://oisfevents.net
>>
>