argus and snort ?

[Russell Fulton]

Perhaps I should have said that I am monitoring an 10Mbps ethernet 
running at around 3Mbps in one 'direction' (inbound) and 1 Mbps in the 
other. (yes I do know that ethernet does not have any sense of 
direction ;-)  The box is an IBM Ativa with a 500Mhz processor and 
128MB ram.

Top shows Snort using about 8% of CPU and the two copies of argus are 
down below 1%.

We will soon go to 100Mbps on the DMZ and our data rates are likely to 
go up steeply when the Southern Cross fiber finally gets commissioned 
later this year.  We have been promised that prices will fall sharply 
-- I'm not holding my breath though...

Cheers.