On Tue, Mar 04, 2003 at 05:56:57PM +0100, Johan Brunius wrote:
> OK, just wanted to know if there were any performance diff or something
> between them =)

It depends on your hardware and the stress you want to impose on it.
On intel, FreeBSD and Linux are fine (provided that you don't start
running out of memory under Linux), on non-intel, Solaris is a safe bet.

If you want more details, the main difference will lie in libpcap and
fork() :

pcap: (this is important if you want to scan sparsely populated
networks, because you want nessusd to ping the remote hosts quickly)


- libpcap-nessus on Linux sucks when it tries to sniff the data going
  on the loopback. I tried to upgrade to libpcap-0.6.x, and the results
  are even worse (while it works on loopback, it mixes packets when 
  it comes to testing dozens of hosts in parallel)

- libpcap-nessus on FreeBSD is great, but you need to have as there are
  nessusd processes. 
 
- Solaris works great pcap-wise.


fork():

- You need a unix where fork() is cheap (copy-on-write). I think that
  nowadays, every unix-like system has a copy-on-write fork (i'd be
  interested in being proved wrong), so it's not really an issue any
  more, but it's good to keep in mind.


                                -- Renaud

Reply via email to