Is my setup just ok for snort?

[Snailkhan]

hi
i have an intel atom n270 1.6 ghz single core (with ht) based system using nano bsd off of my kingston 4gb old usb.
it has 1gb ddr2 ram ..
i have ppoe connection 4 Mbps. is above system capable of running snort ?
its a home setup .. 5-6 users at most ..
i jsut want to learn it ..

[Stewart]

I'd say yes.  If not you can always remove it.  We run snort on dual-core 2 ghz APUs with 2GB RAM and they run fine.  It's not ideal but I see no problem with it.

Edit:  Just realized you are running nanoBSD.  It's probably not going to work, at least past a reboot, since the files are stored in /var and that's a RAM disk that flushes with each restart.

[Guest]

i have an intel atom n270 1.6 ghz single core (with ht) based system using nano bsd off of my kingston 4gb old usb

better to use a hdd or ssd with a full install

it has 1gb ddr2 ram ..

2 GB - 4 GB should be fine pending on the traffic

i have ppoe connection 4 Mbps. is above system capable of running snort ?

Perhaps yes, perhaps not, this will be also pending on the by you awaited throughput that
you need. It might be running but then please have a look to the throughput that you are
getting out.

its a home setup .. 5-6 users at most ..

One user can smash this or take all power and 50 don´t, this is also pending on what they are doing!

i jsut want to learn it ..

Then don´t ask and try it out but as before declared with a full install on a HDD or SSD.

[Snailkhan]

@BlueKobold:

i have an intel atom n270 1.6 ghz single core (with ht) based system using nano bsd off of my kingston 4gb old usb

better to use a hdd or ssd with a full install

it has 1gb ddr2 ram ..

2 GB - 4 GB should be fine pending on the traffic

i have ppoe connection 4 Mbps. is above system capable of running snort ?

Perhaps yes, perhaps not, this will be also pending on the by you awaited throughput that
you need. It might be running but then please have a look to the throughput that you are
getting out.

its a home setup .. 5-6 users at most ..

One user can smash this or take all power and 50 don´t, this is also pending on what they are doing!

i jsut want to learn it ..

Then don´t ask and try it out but as before declared with a full install on a HDD or SSD.

well i have setup things on it ..
usign 4 wireless ssids (just for testing … later will do some usefull stuff with them ).

snort is working fine after some sleepless hours..

ssd is ordered waiting of it to arrive ..

so if snort doestn survives reboot how can i ensure it should .
can i just copy the /var to some other location and when system is rebooted recopy them ?