[Bro] Hardware Experience

Joel Ebrahimi jebrahimi at bivio.net
Mon May 4 14:02:22 PDT 2009

Hi Nick,

Another hardware option is the Bivio platform (http://www.bivio.net).
First I should make a disclaimer that I work for the company.

We offer a hardware platform that is designed for DPI applications like
Bro. The system is really a networking platform and much different than
off the shelf hardware you would get from Sun. The Bivio system is
designed to deal with traffic at 10Gb/s (or more with scaling) and comes
with configurable interfaces that range from 1 G copper to 10 G fiber.

The Bivio system is PowerPC Linux based so it is fairly trivial to port
Bro or any pcap based application to our platform. I have ported it in
the past and built RPMs, and I'm currently looking forward to the
cluster release of Bro in the 1.5 version as it is an extremely good fit
for the distributed architecture design of our hardware. 

I would highly recommend taking a looking if your goal is to not only
use 10G interfaces, but to be able to deal with that 10G of traffic. 


// Joel 

Joel Ebrahimi
Solutions Engineer
Bivio Networks Inc.

-----Original Message-----
From: bro-bounces at ICSI.Berkeley.EDU
[mailto:bro-bounces at ICSI.Berkeley.EDU] On Behalf Of Nick Buraglio
Sent: Monday, May 04, 2009 11:48 AM
To: bro at bro-ids.org
Subject: [Bro] Hardware Experience

Hash: SHA1

Good afternoon, list.  I'm hoping to get a quick opinion on some  
hardware.  I've done some brief looking and not really found what I'm  
seeking so I'll post here in hopes that one of you can share some  
I'm exploring deployment of some Bro boxes and was hoping to leverage  
a great deal that Sun is offering to get the hardware.  I know that  
the boxes can do what I need them to do, as I've worked on Bro  
implementations elsewhere.  What I'd really like to know is if anyone  
has used the Sun (Intel Chipset 82598) dual port 10g cards?  They're a  
decent savings of capitol, but I'd rather just spend the money to get  
the cards I'm used to (single port 10g Intel or Myricom) if the dual  
port cards behave strangely or are a time-vortex to get working.
I'm making an assumption that the dual port cards operate similar to  
the single port cards.  Has anyone used these in a bro deployment?

- ---
Nick Buraglio
Network Engineer, CITES, University of Illinois
GPG key 0x2E5B44F4
Phone: 217.244.6428
buraglio at illinois.edu

Version: GnuPG v1.4.9 (Darwin)


Bro mailing list
bro at bro-ids.org

More information about the Bro mailing list