Snort mailing list archives
Re: [Fwd: Re: tippingpoint]
From: Gary Flynn <flynngn () jmu edu>
Date: Fri, 17 Oct 2003 23:24:47 -0400
Geoff wrote:
We actually use a Cisco FWSM to give us the numbers and then we check them against a Toplayer that is doing load balancing for our IDS machines.We can also pull some information out of Netflow.If you mean how do we generate the connections... wellllll we don't. We have about 30,000 students do it for us :).
I can second the notion that putting a device of this type on an academic institution's Internet connection can be quite effective at ferreting out bugs, limitations, effectiveness, and versatility. :)
------------------------------------------------------- This SF.net email sponsored by: Enterprise Linux Forum Conference & ExpoThe Event For Linux Datacenter Solutions & Strategies in The Enterprise Linux in the Boardroom; in the Front Office; & in the Server Room http://www.enterpriselinuxforum.com
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- [Fwd: Re: tippingpoint] Geoff (Oct 17)
- Re: [Fwd: Re: tippingpoint] Josh Berry (Oct 17)
- Re: [Fwd: Re: tippingpoint] Geoff (Oct 17)
- Re: [Fwd: Re: tippingpoint] Gary Flynn (Oct 17)
- Re: [Fwd: Re: tippingpoint] Geoff (Oct 17)
- <Possible follow-ups>
- RE: [Fwd: Re: tippingpoint] Bob Walder (Oct 17)
- Re: [Fwd: Re: tippingpoint] Josh Berry (Oct 17)