OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Gigabit IDS solutions
From: Keiji Takeda (keijiSFC.KEIO.AC.JP)
Date: Thu Nov 16 2000 - 23:52:24 CST


Hello,

Thanks for your valuable information all the time.

I would like to ask people to add types of packet(protocol) used
when they present capturing performances of IDSs.

If available, precise descriptions on packets will be more usefull.

Traffics of simple UDPs and scrambled and fragmented TCP have
much differences in terms of performance evaluations.

Robert Graham san wrote on Tue, 14 Nov 2000 17:26:02 -0800
>There has been some discussion of testing of gigabit solutions, mostly focused
>on "rates". If you want a truly exact measurement, you should focus on exact
>"counts" coming out of the IDS. The problem is that "rate" measurements are
>highly prone to error.

Keiji Takeda ( http://www.sfc.keio.ac.jp/~keiji/ )