IDS mailing list archives

interesting paper about high-speed traffic monitoring


From: Ron Gula <rgula () tenablesecurity com>
Date: Fri, 09 Jan 2004 13:57:44 -0500


A very good discussion of higher speed packet sniffing. It focuses on
100 Mb, but will shed some light on the sort of mods that various x86
NIDS vendors have had to make to get the performance on Linux.

http://luca.ntop.org/Ring.pdf


Ron Gula, CTO
Tenable Network Security
http://www.tenablesecurity.com



---------------------------------------------------------------------------
---------------------------------------------------------------------------


Current thread: