Re: [Moderator FWD] Re: IDS: BlackICE IDS

Subject: Re: [Moderator FWD] Re: IDS: BlackICE IDS
From: Dug Song (dugsongmonkey.org)
Date: Wed Dec 08 1999 - 19:51:35 CST

• Next message: Colin Haxton: "IDS: Integrated Console"
• Previous message: Jeff Oliver: "IDS: RE: new subscriber"
• In reply to: Lister, Justin: "[Moderator FWD] Re: IDS: BlackICE IDS"
• Reply: Dug Song: "Re: [Moderator FWD] Re: IDS: BlackICE IDS"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owneruow.edu.au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
USUBSCRIBE: email "unsubscribe ids" to majordomouow.edu.au
---------------------------------------------------------------------------

---
On Wed, 8 Dec 1999, Martin Roesch wrote:
> A better solution is to use Dug Song's tcpreplay to retransmit the
> packet traffic files directly onto the network at a selectable speed, so
> that you get a "Real World" test of the performance while reading data
> through the NIC.
tcpreplay is indeed an excellent tool for this, as you can sample local
traffic and replay the same sample against different IDSs for comparative
testing. the traffic shaping options should be used carefully, though -
they were only included to implement a poor man's load generator.
also, credit where credit's due: Matt Undy <mundyanzen.com> wrote
tcpreplay, not me. :-)
-d.
---
http://www.monkey.org/~dugsong/

• Next message: Colin Haxton: "IDS: Integrated Console"
• Previous message: Jeff Oliver: "IDS: RE: new subscriber"
• In reply to: Lister, Justin: "[Moderator FWD] Re: IDS: BlackICE IDS"
• Reply: Dug Song: "Re: [Moderator FWD] Re: IDS: BlackICE IDS"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b27 : Thu Dec 09 1999 - 07:20:28 CST