IDS mailing list archives

SourceFire RNA


From: Lior Tal <lior () us-path com>
Date: 2 Dec 2003 10:58:20 -0000



Hi,
Did anyone had a chance to evaluate the RNA published on SourceFire web site?
From what I coule understand, they claim that by passive traffic analysis the RNA can trace every network device, 
service and open port within a network. It is difficult for me to understand how can passive traffic analysis detect 
inactive devices and services which do not transmit any network traffic?
Can anyone help figure that one?
Lior
US-Path Inc.

---------------------------------------------------------------------------
---------------------------------------------------------------------------


Current thread: