[Zeek] NIC benchmarks and selection criteria

Woot4moo tscheponik at gmail.com
Fri Apr 12 04:58:21 PDT 2019


Thanks, I was unaware of these two guides. Appreciate the extra detail
about probably not needing a dedicated card.

I'll dig into these and drop more questions as they come up.

On Fri, Apr 12, 2019 at 7:49 AM Michał Purzyński <michalpurzynski1 at gmail.com>
wrote:

> What’s your expected throughput? For anything from 1Gbit up just use Intel
> X710 based cards.
>
> The Suricata running guide we wrote a while ago applies to Zeek as well.
>
> https://github.com/pevma/SEPTun
>
> https://github.com/pevma/SEPTun-Mark-II
>
> Gone are the days of Myricoms, etc. It’s rather unlikely you will need
> dedicated capture cards either.
>
>
> On Apr 12, 2019, at 1:27 PM, Woot4moo <tscheponik at gmail.com> wrote:
>
> Are there any available benchmarks by which the community measures NIC
> selection? I.E., How do others known which hardware baseline to choose for
> a given traffic volume while using Zeek.
>
>
> _______________________________________________
> Zeek mailing list
> zeek at zeek.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190412/20bf561d/attachment.html 


More information about the Zeek mailing list