I'm trying to use a device with 1GB of RAM and a Single 800 MHz core CPU.
I will use Snort to analyze traffic on my LAN network. Snort, unfortunately, cannot analyze all the traffic (sometimes it triggers an alert after a trigger, sometimes not).
- Is there a way to say "Analyze X Mbps of traffic", otherwise let the traffic flow?
- Can you tell me where I can get a list of "reduced" RuleSet with only the most terrible attacks? Right now I just use the CRITICAL ruleset
- Can FWSNORT be a good alternative?