|
Title:
|
A COMPARISON OF THE RESOURCE REQUIREMENTS OF SNORT AND BRO IN PRODUCTION NETWORKS |
|
Author(s):
|
Richard J Barnett , Barry Irwin |
|
ISBN:
|
978-972-8924-97-3 |
|
Editors:
|
Hans Weghorn and Pedro Isaías |
|
Year:
|
2009 |
|
Edition:
|
V II, 2 |
|
Keywords:
|
Snort, Bro, NIDS, resource, requirements, testing |
|
Type:
|
Short Paper |
|
First Page:
|
94 |
|
Last Page:
|
97 |
|
Language:
|
English |
|
Cover:
|
|
|
Full Contents:
|
click to dowload 
|
|
Paper Abstract:
|
Intrusion Detection is essential in modern networking. However, with the increasing load on modern networks, the
resource requirements of NIDS are significant. This paper explores and compares the requirements of Snort and Bro, and
finds that Snort is more efficient at processing network traffic than Bro. It also finds that both systems are capable of
analysing current network loads on commodity hardware, but may be unable to do so for higher bandwidth networks.
This is beneficial in a South African context due to the increasing international bandwidth that will come online with the
launch of the SEACOM Cable, and local projects such as SANREN. |
|
|
|
|
|
|
