Hi, I wanted to give some recent, detailed performance number on the
10G appliance. We have done
some extra work to optimize its processing using Luca Deri's Direct
Nic Access (DNA) driver (5.1). The results are impressive.
New numbers using the Intel icc compiler are very encouraging. We
found that a 2 processor X5670 system can easily
sustain 5 Gbps. We run some academic traces with 4 different Snort
EmergingThreats Pro rule configurations and we are seeing < 5%
drop rate with up to 6900 rules. We are going to publish these
results through the snort and ntop mailing list soon; with
instructions on how
to reproduce the numbers. In the meantime, let me know if you have any
questions.
Livio.