Re: High Performance IDS's

[Chris Baker <extremis () exploit org>]

1000 Gb? Are you sure about that?

On Jan 7, 2004, at 3:09 PM, Palmer, Paul (ISSAtlanta) wrote:

> Do you want systems that can monitor a GigE network or do you want
> systems that can monitor 1000 or 2000 Gb/s (that is 100% of a full
> duplex GigE link)? There are many more vendors that interpret GigE
> capable to mean that they can read from a GigE network than there are
> that can handle all of the traffic on those same networks.
>
> ISS has several solutions rated for more than 1000 Gb/s that have had
> their performance independently verified. During the last tests they
> actually did drop a small percentage of packets when the network was
> saturated with very small UDP packets, but this has only ever occurred
> in a special lab test environment.
>
> Paul
>
> Disclaimer: I work for ISS. I am not authorized to speak on behalf of
> the company, but I am biased in favor of our products and heartily
> recommend them.
>
> -----Original Message-----
> From: Richard Worwood [mailto:mlists () tdbnetworks org]
> Sent: Wednesday, January 07, 2004 2:06 PM
> To: focus-ids () securityfocus com
> Subject: High Performance IDS's
>
> I was wondering if anyone had any recommendation for GigE capable
> systems?
>
>
> ----------------------------------------------------------------------- 
> -
> ---
> ----------------------------------------------------------------------- 
> -
> ---
>
>
> ----------------------------------------------------------------------- 
> ----
> ----------------------------------------------------------------------- 
> ----


---------------------------------------------------------------------------
---------------------------------------------------------------------------