[Zeek] NIC benchmarks and selection criteria

[Michał Purzyński]

What’s your expected throughput? For anything from 1Gbit up just use Intel X710 based cards.

The Suricata running guide we wrote a while ago applies to Zeek as well.

https://github.com/pevma/SEPTun

https://github.com/pevma/SEPTun-Mark-II

Gone are the days of Myricoms, etc. It’s rather unlikely you will need dedicated capture cards either.


> On Apr 12, 2019, at 1:27 PM, Woot4moo <tscheponik at gmail.com> wrote:
> 
> Are there any available benchmarks by which the community measures NIC selection? I.E., How do others known which hardware baseline to choose for a given traffic volume while using Zeek.
> 
> 
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190412/6bae3fe2/attachment.html