[Bro] Hardware Experience

[Nick Buraglio]

Thanks for the info.

nb


---
Nick Buraglio
Network Engineer, CITES, University of Illinois
GPG key 0x2E5B44F4
Phone: 217.244.6428
buraglio at illinois.edu



On May 4, 2009, at 4:02 PM, Joel Ebrahimi wrote:

> Hi Nick,
>
> Another hardware option is the Bivio platform (http://www.bivio.net).
> First I should make a disclaimer that I work for the company.
>
> We offer a hardware platform that is designed for DPI applications  
> like
> Bro. The system is really a networking platform and much different  
> than
> off the shelf hardware you would get from Sun. The Bivio system is
> designed to deal with traffic at 10Gb/s (or more with scaling) and  
> comes
> with configurable interfaces that range from 1 G copper to 10 G fiber.
>
> The Bivio system is PowerPC Linux based so it is fairly trivial to  
> port
> Bro or any pcap based application to our platform. I have ported it in
> the past and built RPMs, and I'm currently looking forward to the
> cluster release of Bro in the 1.5 version as it is an extremely good  
> fit
> for the distributed architecture design of our hardware.
>
> I would highly recommend taking a looking if your goal is to not only
> use 10G interfaces, but to be able to deal with that 10G of traffic.
>
> Cheers,
>
> // Joel
>
> Joel Ebrahimi
> Solutions Engineer
> Bivio Networks Inc.
> http://www.bivio.net
>
>
>
> -----Original Message-----
> From: bro-bounces at ICSI.Berkeley.EDU
> [mailto:bro-bounces at ICSI.Berkeley.EDU] On Behalf Of Nick Buraglio
> Sent: Monday, May 04, 2009 11:48 AM
> To: bro at bro-ids.org
> Subject: [Bro] Hardware Experience
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Good afternoon, list.  I'm hoping to get a quick opinion on some
> hardware.  I've done some brief looking and not really found what I'm
> seeking so I'll post here in hopes that one of you can share some
> experience.
> I'm exploring deployment of some Bro boxes and was hoping to leverage
> a great deal that Sun is offering to get the hardware.  I know that
> the boxes can do what I need them to do, as I've worked on Bro
> implementations elsewhere.  What I'd really like to know is if anyone
> has used the Sun (Intel Chipset 82598) dual port 10g cards?  They're a
> decent savings of capitol, but I'd rather just spend the money to get
> the cards I'm used to (single port 10g Intel or Myricom) if the dual
> port cards behave strangely or are a time-vortex to get working.
> I'm making an assumption that the dual port cards operate similar to
> the single port cards.  Has anyone used these in a bro deployment?
>
>
> Thanks,
> nb
> - ---
> Nick Buraglio
> Network Engineer, CITES, University of Illinois
> GPG key 0x2E5B44F4
> Phone: 217.244.6428
> buraglio at illinois.edu
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (Darwin)
>
> iEYEARECAAYFAkn/OGkACgkQFOm2Sy5bRPRR1gCeKRIAGYMLVoygM/MnQiXJL4+u
> gpUAmQFpLOx+OxVXRZR3b11hkn+nwZ1k
> =rx7J
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro