200GB a day - traffic or flows?

Jonathan Tripathy jonnyt at abpni.co.uk
Wed Aug 3 14:58:48 EDT 2011



On 03/08/2011 19:47, John Gerth wrote:
> On 8/3/2011 10:55 AM, Jonathan Tripathy wrote:
>>
>> On 03/08/2011 18:37, John Gerth wrote:
>>> On 8/3/11 7:46 AM, Jonathan Tripathy wrote:
>>>>
>>>> Do you think argus is able to handle a setup using standard hardware which pushes 200GB a day? I intend to run argus on the actual servers, and have a
>>>> dedicated server for reading the stream and writing it out to a database. No switch port mirroring involved.
>>>>
>>>> Do this sound reasonable?
>>>>
>>>    Are you talking about 200GB/day of network traffic or 200GB/day of argus flows?
>>
>> 200GB of network traffic a day :)
>>
>   Assuming the traffic has a typical distribution of applications and packet sizes,
>   you're only going to see megabytes/day of argus records
>
>   If your hardware is less than 5 years old, I can't imagine how there would be a problem.

Thanks for the info :)

I just wanted to make sure that I was in the correct ballpark

Cheers



More information about the argus mailing list