M.2 PCIe Lanes in 3100-SG
-
How many PCIe lanes does the 3100-SG have?
In a chat room I asked if anyone was doing packet captures with the M.2 in a 3100-SG, and if there was a performance impact. The pfSense Snort package does pcaps. Is that even practical for continuous use or just brief troublshooting? The only answer I got was performance depends on how many PCIe lanes are used by the M.2. -
The M.2 slot in the SG-3100 is SATA so I think the question is probably not relevant.
But I would say that does not make sense. If you wanted to do something like that you should use Snort as a remote sensor and feed data back to something central. I believe security onion can do that, though I've yet to try it myself. But that would not be continuous pcaps either. That's probably far more data that can be usefully handled on the 3100.
Steve
-
Thats a really good point. Its too much data to be useful. I use Security Onion, so I'll continue that route with a port mirror or dedicated tap I have. Since pfSense has a Snort package, I figured the M.2 would be great for its activity.
-
There's no provision for using multiple drives in pfSense so you would need to boot from m.2 SSD
or add your own scripts to enable it. There's a pretty good chance you would fill the drive accidentally and cause problems for the firewall. Hard to recommend doing that.Either way though, the m.2 slot is not NVMe so no PCIe lines.
Steve
