Snort mailing list archives

High Speed Network Cards + rules?


From: "Adriel T. Desautels" <atd () secnetops com>
Date: Mon, 24 May 2004 14:18:48 -0400

Greetings list,
        It is my understanding that most network cards at 50% capacity begin to
miss packets and create a false negatives condition (IDS evasion technique).
Is anyone aware of any cards that exist that collect 100% of the traffic
with 0% false negatives due to this condition?  If not, what is the next
best thing?

        Secondly, does anyone know of any other snort rule repositories aside from
those presented at snort.org?

Adriel T. Desautels
Secure Network Operations
Embracing the future of technology, protecting you.
Office: 978-263-3829    Fax: 978-263-3313
atd () secnetops com   www.secnetops.com




-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: