[ARGUS] argus data rates experience?

[Richard Johnson]

I've just reread Peter Van Epp's :login; article from 2001, as it's the
only place I can find any numbers regarding Argus performance on sample
networks.  (IOW, article good, my search abilities bad. :-)

I'm now charged with logging traffic across a WAN interface that's peaking
at 250 Mbps and 30,000 packets/sec.

I'm going to try a 2GHz dual CPU system running FreeBSD using a SysKonnect
SK9843 GigE interface and a fibrechannel array TBD connected via a Qlogic
ISP2300 card, and see if it can keep up.  Does that raise any red flags?

In addition, I'm very uncertain as to the storage requirements for log
files (IOW, how big a chunk of that array will I need?).  Can anyone give
an idea of how fast the log files might grow per packet under a typical
university mix of interactive logins and file transfers?

Thanks in advance for any pointers or warnings you might have for me.


Richard