RE: Snort is a "niche player"

["Bob Walder" <bwalder () spamcop net>]

Couldn't agree more - I do a presentation entitled "IDS is Dead?" (note
the question mark!) which cites various extracts from various Gartner
reports, including:

"Intrusion detection systems are a market failure, and vendors are now
hyping intrusion prevention systems, which have also stalled" 
Richard Stiennon
Research Vice President, Gartner
June 2003 


"IDSs have failed to provide value relative to its costs and will be
obsolete by 2005" 
Gartner
June 2003 


"The PC is dead - thin is in." 
   "By 2001 we will all have replaced our PCs with thin clients or
Network Computing devices."
Gartner
Circa 1998-99 


That third one kills every time ;o)

I hate that they keep turning out crap like this, because they make
claims such as "IDS/IPS devices suffer from an inability to monitor
traffic at transmission rates greater than 600 megabits per second"

They base these ridiculous claims on.... Well, I am not sure what....
Hearsay? Finger in the wind? Who knows...

They CERTAINLY do not do any testing, nor do they speak to people like
us who DO do testing, since if they did, they would know that our latest
reports (www.nss.co.uk/ips and www.nss.co.uk/gigabitids) show several
devices that can go way beyond their mythical 600Mbps limit. We have
tried many times to get the likes of Gartner to work with us so they can
provide reports to their clients based on REAL testing, but they will
not have it.

As someone else on this thread said, to be taken with extremely large
amounts of sodium chloride...

Regards,

Bob Walder
Director
The NSS Group







> > -----Original Message-----
> > From: snort-users-admin () lists sourceforge net 
> > [mailto:snort-users-admin () lists sourceforge net] On Behalf 
> > Of twig les
> > Sent: 29 June 2004 19:23
> > To: snort-users () lists sourceforge net
> > Subject: Re: [Snort-users] Snort is a "niche player"
> >
> >
> > I have the report.  The copy I have was sent to me by our 
> > vendor, who is listed in the "Visionary" category.  The fact 
> > that they are in there immediately told me that Gartner had 
> > not actually *used* any of these products because our vendor 
> > (who will remain unnamed) is so atrocious.  It is a 7-page 
> > report and it gave me the distinct impression that were 
> > Gartner to be in my house while I was painting they would 
> > stand behind me and point out all the spots I missed while 
> > drinking a margerita with their feet propped up on my table.
> >
> > =====
> > -----------------------------------------------------------
> > With a few exceptions, secrecy is deeply incompatible with 
> > democracy and with science.
> >      --Carl Sagan  
> > -----------------------------------------------------------
> >
> >
> >              
> > __________________________________
> > Do you Yahoo!?
> > Yahoo! Mail - 50x more storage than other providers! 
http://promotions.yahoo.com/new_mail


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training. Attend
Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users