LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 07-01-2017, 11:40 AM   #1
aidin8790
LQ Newbie
 
Registered: Apr 2014
Posts: 29

Rep: Reputation: Disabled
performance of snort vs suricata with iozone


Hi all..

I want to compare performance of 2 systems that using snort and suricata.

I have install snort in an Ubuntu system and suricata in another Ubuntu.

how can i test with "iozone" that witch one of these IDSes have better performance on the system?

In fact,I want to know how to use iozone (which options of iozne should be use) to have better output of this comparison.

may you help me????
 
Old 07-01-2017, 10:44 PM   #2
AwesomeMachine
LQ Guru
 
Registered: Jan 2005
Location: USA and Italy
Distribution: Debian testing/sid; OpenSuSE; Fedora; Mint
Posts: 5,513

Rep: Reputation: 1009Reputation: 1009Reputation: 1009Reputation: 1009Reputation: 1009Reputation: 1009Reputation: 1009Reputation: 1009
Iozone is a file system benchmark, and snort is an IDS. You probably would want to use a packet generator to test the IDS performance.
 
Old 07-02-2017, 08:23 AM   #3
aidin8790
LQ Newbie
 
Registered: Apr 2014
Posts: 29

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by AwesomeMachine View Post
Iozone is a file system benchmark, and snort is an IDS. You probably would want to use a packet generator to test the IDS performance.
I know that , I am sending packet to the system with packet generator , and I want to get system benchmark of a system that running IDS on it. in fact I want to check that analyzing packets with an IDS have how much influence on system ideally working?
 
Old 07-07-2017, 03:34 AM   #4
AwesomeMachine
LQ Guru
 
Registered: Jan 2005
Location: USA and Italy
Distribution: Debian testing/sid; OpenSuSE; Fedora; Mint
Posts: 5,513

Rep: Reputation: 1009Reputation: 1009Reputation: 1009Reputation: 1009Reputation: 1009Reputation: 1009Reputation: 1009Reputation: 1009
I would guess it only will have a slight effect on disk IO. You can view disk IO in "atop" A gigabit interface loaded with traffic is not enough to slow a modern PC system. But I don't know how you could adapt iozone to use disk activity under ids testing instead of its own routines.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Protect Standalone Web Servers - Snort? Suricata? olsoncr Linux - Security 4 05-19-2015 05:15 PM
Invisible Snort and Suricata installs Novatian Linux - Software 1 08-23-2014 08:20 AM
LXer: Suricata: The Snort Replacer (Part 3: Rules) LXer Syndicated Linux News 0 07-30-2013 07:30 PM
LXer: Suricata: The Snort Replacer (Part 2: Configure & Test) LXer Syndicated Linux News 0 07-26-2013 04:20 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 01:20 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration