RE: Snort as a gigabit sensor ... on a Sun box

["Michael Steele" <michaels () winsnort com>]

Twigles,

Hopefully he's not in support. Here's one; Sent one of our commercial sun
IDS boxes to a Windows shop. He calls the day he receives it and asks "How
do I turn this thing on". I would have been out of a job if I would have
taken the path that Edin took, very unprofessional.

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of twig les
Sent: Wednesday, July 30, 2003 10:03 AM
To: edin.dizdarevic () interActive-Systems de;
snort-users () lists sourceforge net
Subject: Re: [Snort-users] Snort as a gigabit sensor ... on a Sun box

Wow man, it was just a *discussion* thread, you don't have to
read it.  I stopped reading most threads myself.  And I truly
hope that you are the technical expert you portray yourself as
because your people skills suck in a major way.

--- Edin Dizdarevic <edin.dizdarevic () interActive-Systems de>
wrote:
> Well, seems nobody is reading the FAQ anymore...
>
> Why are we discussing about such things knowing nothing about
> boundary conditions?
>
> Will "somuch hard- & software" handle "somuch traffic"?
>
> Are the things so simple?
>
> "Yes, if you're looking for ARP packets", would be the right
> answer for that kind of question AFAIC.
>
> And: "No if Snort is logging in a DB by itself...".
>
> In my eyes people asking such questions are absolute novices
> in networking - not only in network based intrusion detection.
>
> Is this assumption correct?
>
> If yes:
>
> Guys, please read the FAQ and older threads about packet
> dropping problems. The answers are already there, because
> we've all been absolute beginners at some point and had the
> same questions you ask now.
>
> Regards,
>
> Edin
>
>
> twig les wrote:
> > Hey all, since the crowd is chatting about gigabit sensors,
> can
> > anyone tell me if they are using a Sun box to get anything
> over
> > 150Mbps, maybe up to 300?  I don't know much about Sun
> hardware
> > and would prefer to avoid dropping $20,000 x 2.  This box
> will
> > have to run (sigh) Solaris 8.
>
> -- 
> Edin Dizdarevic
>
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites
> including
> Data Reports, E-commerce, Portals, and Forums are available
> now.
> Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
Emo is what happens when the glee club goes punk.       
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users