Which Linux Distro better suited for Snort?
 

Hello,

Silly question but what would be better suited Linux distro for a snort implementation in a corporation of say about 500 systems??? A good stable distro is what I am looking for but I have no clue. Anyone have any experience with this? Thanks a lot!!!

I have run Snort on several different distros and can honestly say, it doesn't matter. What does matter is RAM, and a good Processor. While I have successfully used Snort on a Squid Server running a PII-233 w/128MB of RAM, it really performs better on a nicer machine.

And remember, send the logging to a database NOT on the Snort machine, with insert privileges only. That way your logs are secure and won't likely be tampered with.