[Bro] 10g Nic Cards

[Keith Lehigh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

32 rings per adapter according to this [1]

- - Keith

[1] https://www.myricom.com/software/sniffer10g/470-what-is-the-maximum-number-
of-rings-supported-by-sniffer10g.html

> We were pricing out 64 core (4x 16 processors AMD).   Does anyone know
> if the Myricom's can support load balancing to 64 cores?   I recall the
> 32 core limit for PF_RING.
> 
> Tyler
> 
> --
> Tyler Schoenke
> Network Security Program Manager
> IT Security Office
> University of Colorado at Boulder
> 
> 
> On 5/6/13 5:09 PM, Vlad Grigorescu wrote:
> > On May 6, 2013, at 5:35 PM, "Slagell, Adam J" <slagell at illinois.edu> wrote:
> >
> >> But you need to pay for the sniffing driver to really make use of them.
> > This is actually the same for Intel NICs as well. If you go the Intel route
> , you'll probably want a similar license for ntop's PF_RING + DNA driver and 
> the price comes out to be just about the same as Myricom[1]. You can opt to n
> ot get this license, but performance will suffer. Research and educational ne
> tworks used to get an exemption from ntop license fees, however this is no lo
> nger the case for PF_RING + DNA since development was subsidized by Silicom. 
> If you get a dual-port NIC, the difference becomes even more exaggerated, as 
> the ntop license is $261 *per port* as opposed to the $295 *per card* Myricom
>  license.
> >
> > Other advantages of the Myricom cards is that they're easier to work with a
> nd a bit faster. The Myricom sniffer driver doesn't require special privilege
> s to sniff traffic, so you don't have to do funky setcap stuff - it "just wor
> ks," even if you don't run Bro as root. From a simple test that someone at a 
> large university ran, pitting a Myricom card with the Myricom sniffer driver 
> against an Intel card with the top-of-the-line ntop driver (PF_RING + DNA + l
> ibzero - a $500 license), the Myricom card was better performing.
> >
> > Hope that provides some insight into why we went with Myricom, at least.
> >
> >   --Vlad Grigorescu
> >     Senior Information Security Engineer
> >     Carnegie Mellon University
> >
> > [1] - Using CDW prices, Myricom + 10G short-range optics + license is $864.
> 98, while Intel x540 + 10G short-range optics + license is $850.98.
> > _______________________________________________
> > Bro mailing list
> > bro at bro-ids.org
> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> >
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAlGVdd8ACgkQW5AQrvjB4mdruwCeIpbi2O86Fsk8yhLla6vN3od5
0JAAnio+6b/sOdq3BbemtjfFUNbZDMTM
=vYrD
-----END PGP SIGNATURE-----