IDS mailing list archives
Fw: Promiscuous vs Inline IDS
From: "Mustapha Huneyd" <mhbengal () yahoo com>
Date: Wed, 30 Apr 2003 16:40:37 +0400
I was wondering if there are tests conducted to show traffic (bottleneck) patterns for both INLINE & Promiscuous IDS. Also are there tests that highlight differences or similarities in capture patterns for both kinds of IDS? Basically I want to know if an Inline IDS would create a bottleneck in a Fast ethernet / GE network?. For e.g. SNORT inline vs ISS Realsecure or Cisco IDS Mustapha ------------------------------------------------------------------------------- Can you respond to attacks based on attack type, severity, source IP, destination IP, number of times attacked, or the time of day an attack occurs? No? No wonder why you're swamped with false positives! Download a free 15-day trial of Border Guard and watch your false positives disappear. http://www.securityfocus.com/StillSecure-focus-ids2 -------------------------------------------------------------------------------
Current thread:
- Fw: Promiscuous vs Inline IDS Mustapha Huneyd (May 04)
- Re: Fw: Promiscuous vs Inline IDS Paul Schmehl (May 06)
- Re: Fw: Promiscuous vs Inline IDS Dener L. Martins (May 07)