Snort mailing list archives

Missed Alerts


From: "Ed Greshko" <Edward.M.Greshko () syntegra com>
Date: Mon, 7 May 2001 20:46:49 +0800

Hi,

Has anyone done any work to determine the percentages of missed alerts?  i.e.
alerts not being recorded when they are known to have taken place.

Along those same lines, does anyone have guidelines as to what type of HW one
needs to reduce the percentages of missed alerts when the links being
monitored are being utilized at given levels.

Yes, I'm trying to size a system for production use.  :-)

Thanks,
Ed


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: