200GB a day - traffic or flows?
Jonathan Tripathy
jonnyt at abpni.co.uk
Wed Aug 3 14:58:48 EDT 2011
On 03/08/2011 19:47, John Gerth wrote:
> On 8/3/2011 10:55 AM, Jonathan Tripathy wrote:
>>
>> On 03/08/2011 18:37, John Gerth wrote:
>>> On 8/3/11 7:46 AM, Jonathan Tripathy wrote:
>>>>
>>>> Do you think argus is able to handle a setup using standard hardware which pushes 200GB a day? I intend to run argus on the actual servers, and have a
>>>> dedicated server for reading the stream and writing it out to a database. No switch port mirroring involved.
>>>>
>>>> Do this sound reasonable?
>>>>
>>> Are you talking about 200GB/day of network traffic or 200GB/day of argus flows?
>>
>> 200GB of network traffic a day :)
>>
> Assuming the traffic has a typical distribution of applications and packet sizes,
> you're only going to see megabytes/day of argus records
>
> If your hardware is less than 5 years old, I can't imagine how there would be a problem.
Thanks for the info :)
I just wanted to make sure that I was in the correct ballpark
Cheers
More information about the argus
mailing list