Re: [Fwd: Re: tippingpoint]

[Gary Flynn <flynngn () jmu edu>]

Geoff wrote:

> We actually use a Cisco FWSM to give us the numbers and then we check 
> them against a Toplayer that is doing load balancing for our IDS 
> machines.
>
> We can also pull some information out of Netflow.
>
> If you mean how do we generate the connections... wellllll we don't. 
> We have about 30,000 students do it for us :). 


I can second the notion that putting a device of this type on an 
academic institution's Internet connection
can be quite effective at ferreting out bugs, limitations, 
effectiveness, and versatility. :)





-------------------------------------------------------
This SF.net email sponsored by: Enterprise Linux Forum Conference & Expo
The Event For Linux Datacenter Solutions & Strategies in The Enterprise 
Linux in the Boardroom; in the Front Office; & in the Server Room 
http://www.enterpriselinuxforum.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users