RE: Taps supporting traffic aggregation ...

[Steve Bernard <sbernard () gmu edu>]

I can't say that I've ever seen a tap that aggregates traffic. Products from
Top Layer, F5, Alteon, and the like are marketed as "IDS load balancers".
I've talked to NetOptics before about building a tap that actively monitors
multiple links and pushes them all down one monitoring port but, they didn't
have anything like that and it didn't seem likely that they ever would.


Steve


-----Original Message-----
From: Thierry Bole [mailto:tbole () telsys ch]
Sent: Monday, January 26, 2004 8:00 AM
To: focus-ids () securityfocus com
Subject: Taps supporting traffic aggregation ...


Hello,

Has anyone tested taps supporting traffic aggregation (with the
capability to mirror the traffic only on one link)

I know that we can have some bandwidth limitations: if the 2 network
ports are operating at 100mbps and the IDS port is operating at 100mbps
as well, then under sustained aggregate bandwidth of greater than
100mbps, packets will get dropped.

Thank you for your feedback.

Thierry


---------------------------------------------------------------------------
---------------------------------------------------------------------------




---------------------------------------------------------------------------
---------------------------------------------------------------------------