On Sat, 3 Nov 2007, Martin Schrvder wrote: > > You don't need one computer with two discs and two psus; instead get > two systems and use carp to get HA. Also 2GB for a firewall is > overkill. Spend the money on the NICs instead.
If he's going to be doing local processing of pcap(4) data into some sort of SNORT+ACID+PostgreSQL, he's going to want RAID and all that jazz. But I think we can all agree that its best admin practice to move that data off to a remote system for archival/processing. He's also going to draw 8 AMPs >:} ~BAS
