RE: High Performance IDS's

["Palmer, Paul (ISSAtlanta)" <PPalmer () iss net>]

Doh... That should be 1000b/s or 1Gb/s. We still have some performance
improvements to make before we can fully support 1000 Gb/s ;)

-----Original Message-----
From: Chris Baker [mailto:extremis () exploit org] 
Sent: Wednesday, January 07, 2004 4:44 PM
To: Palmer, Paul (ISSAtlanta)
Cc: focus-ids () securityfocus com; Richard Worwood
Subject: Re: High Performance IDS's

1000 Gb? Are you sure about that?

On Jan 7, 2004, at 3:09 PM, Palmer, Paul (ISSAtlanta) wrote:

> Do you want systems that can monitor a GigE network or do you want
> systems that can monitor 1000 or 2000 Gb/s (that is 100% of a full
> duplex GigE link)? There are many more vendors that interpret GigE
> capable to mean that they can read from a GigE network than there are
> that can handle all of the traffic on those same networks.
>
> ISS has several solutions rated for more than 1000 Gb/s that have had
> their performance independently verified. During the last tests they
> actually did drop a small percentage of packets when the network was
> saturated with very small UDP packets, but this has only ever occurred
> in a special lab test environment.
>
> Paul
>
> Disclaimer: I work for ISS. I am not authorized to speak on behalf of
> the company, but I am biased in favor of our products and heartily
> recommend them.
>
> -----Original Message-----
> From: Richard Worwood [mailto:mlists () tdbnetworks org]
> Sent: Wednesday, January 07, 2004 2:06 PM
> To: focus-ids () securityfocus com
> Subject: High Performance IDS's
>
> I was wondering if anyone had any recommendation for GigE capable
> systems?
----------------------------------------------------------------------- 
> -
> ---
----------------------------------------------------------------------- 
> -
> ---
----------------------------------------------------------------------- 
> ----
----------------------------------------------------------------------- 
> ----


---------------------------------------------------------------------------
---------------------------------------------------------------------------