OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Greg Shipley (gshipleyneohapsis.com)
Date: Fri Jan 25 2002 - 11:32:04 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Fri, 25 Jan 2002, Dragos Ruiu wrote:

    > This 40Mbps number is a potentially dangerous bit of misinformation most
    > nids vendors exceeded these drop thresholds a ways back.
    *snip*
    > Packet drop rate, at it's simplest is defined as the ratio of the number
    > of packets you should have seen/alerted/munged/whatever to the number
    > of packets you did get. Measuring this ratio under realistic conditions
    > is left as an excersize for the reader. (Hint: use a controllable,
    > accurate traffic source, and examine logs/statistics/whatever on the
    > receive side carefuly. Don't forget the background load. :-)

    Just to add to what Dragos has stated, saying that NIDS drops at xMbps is
    like saying cars can go as fast as 90 mph.

    Obviously it depends on the car.

    Side note: does anyone know how TopLayer handles fragmentation?

    -Greg