The 200Mb of memory does not include the cached or buffered memory as stated on their system stats. It is showing that I'm using 83 percent of the memory, with 4 percent buffered, 9.4 percent cached, and 3.6 percent free. Nothing currently being used in swap.
When I was running the Copfilter add-on, it was also using the 32Mb of swap space as well. The CPU usage has been very low - less than 1 percent on average for user usage. I did have this running on a P166 but decided to try it out on the higher spec'd box. This message is at the top of the "Intrusion Detection" page located under services which is one of the reasons I was looking for feedback: "Your system is trying to use swap and has low free memory. It may brake stability of your system. Snort uses a lot of memory. Squid memory usage is proportional to cache size. Reduce services used or add more memory." Any IPcop documentation I have found doesn't give you any minimum specs. Cheers! Neil B. On Saturday 28 July 2007 14:52, Jon wrote: > I've only messed with IPCop and discarded in in favour of Shorewall, but > I can comment on the memory thing. We generally implement things in > VMWare virtual machines and I believe the existing IPCop VM 'applicance' > is configured with only 64MB. That's sufficient to run IPCop proper with > a variety of plugins, Snort included. > > Based on that, I would think that your hardware specs would be more than > sufficient. That's based on some rudimentary exploration and no real > experience, though. > > I'm sure that you're seeing 200MB in use because of how Linux uses > memory and not because IPCop actually needs it. I am curious about your > ratio of main mem to swap, though. I know there are many schools of > thought on this, but almost all of them see more swap than main mem > which seems to be the opposite of your configuration. > > If you're VMWare savvy and want a rapid deployment too assess it, you > can get a variety of IPCop VMs here: > http://www.vmwarez.com/2006/01/ipcop-virtual-machine-new-esx-version.html > > J > > Neil Bower wrote: > > I'm looking for feedback from people using IPcop to get a comparision of the > > differences in usage. > > > > What hardware specs are you using for IPcop? (ie processor specs and > > amount of > > memory) > > > > If you are using additional modules or add-ons to the base install, what are > > they? > > > > How much memory is your system using including swap? > > > > What is your basic usage for this box? (ie home network, small office, large > > office, supporting mail, web sites, number of users, etc.) > > > > I have an Intel 1.60GHz with 256Mb of memory plus 32Mb of swap. Running > > a base > > install with snort, I'm using about 200Mb of memory. This box is for > > personal > > use - no web services, no e-mail, etc. > > > > Any feedback is welcomed. > > > > Cheers! > > > > Neil B. > > > > _______________________________________________ > > clug-talk mailing list > > [email protected] > > http://clug.ca/mailman/listinfo/clug-talk_clug.ca > > Mailing List Guidelines (http://clug.ca/ml_guidelines.php) > > **Please remove these lines when replying > > > > -- > Key fingerprint: BDE0 DE52 B8C0 0CDF 7653 E5A2 D861 7877 0D3B 813E > http://www.jonwatson.ca > +1.403.875.6048 > > "Trying to learn to hack on a DOS or Windows machine or under MacOS is > like trying to learn to dance while wearing a body cast" - ESR > > _______________________________________________ > clug-talk mailing list > [email protected] > http://clug.ca/mailman/listinfo/clug-talk_clug.ca > Mailing List Guidelines (http://clug.ca/ml_guidelines.php) > **Please remove these lines when replying >
pgpcPBkwEIlLs.pgp
Description: PGP signature
_______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying
