Security Basics mailing list archives

Re: Considering nSight, any thoughts?


From: Steven Rakick <stevenrakick () yahoo com>
Date: Sat, 30 Jul 2005 11:30:17 -0700 (PDT)

Jason, I did respond, but to another list. Here's my
post just in case...

-
Jason,

Been running nSight for a little over a year now with
data purge after 13 months. We have 3 agents at remote
offices with each inspecting the traffic of around
700-900 hosts. It's been quite helpful. We *had* a ton
of P2P traffic in our networks.
 
When we started out last year, we tried to host all 3
agents on a low end HP blade (with a laptop hd). After
about 2 months it became very slow (mostly due to disk
IO). We upgraded to a faster blade with fast SCSI disk
and it's been flying along ever since.

Also, according to another poster (Darrin Maidlow) on
Full Disclosure, there is a beta program in place
right now for nSight 2.0 at
http://www.intrusense.com/products/beta. I'm not sure
if you're evaluating 2.0 or 1.x.
 
Steve

--- Jason Heschel <jason.heschel () gmail com> wrote:

Hello list,

We've spent the last few weeks evaluating nSight (a
network analysis
package from Intrusense) and are now considering
making a purchase.

I'm curious to hear any opinions, problems or praise
people have for
this software. Does it scale well? How does it
perform after
collecting several months worth of data?

-jason



__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 


Current thread: