From: Joel Esler (joel.eslerme.com)
Date: Tue Jul 13 2010 - 12:50:51 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I don't have the data handy for the actual byte size traffic. Actually. I don't know if I've ever had it, I seem to remember seeing it though.

As for production, I don't mean "testing" in production, I mean actually monitoring a network in production. I've seen a 9900, in ips mode, in real network traffic achieve those speeds. Tuned, of course.

Sent from my iPhone

On Jul 13, 2010, at 1:10 PM, Jeffrey White <Jeff.WhiteRaymondJames.com> wrote:

> Sourcefire were the ones who actually did the testing for us as we
> didn't have the 9900 on-site. We basically did the test with a large
> sampling of our Internet traffic through the 9800, 9900, 6500 and 4500
> to find out what device would be able to handle the load.
>
> When you ran the tests in production, do you have any idea what the
> make-up of traffic was and what policy set it ran? I'd be interested to
> see the information on the 100% 64 byte test as well since our sample
> only contained 36% 64 byte.
>
>
> -----Original Message-----
> From: Joel Esler [mailto:joel.eslerme.com]
> Sent: Tuesday, July 13, 2010 11:48 AM
> To: Jeffrey White
> Cc: Curt Purdy; Mr. Karim; focus-idssecurityfocus.com
> Subject: Re: Whatever happened to 10gb IPS?
>
> That's interesting. Did you report these results to us? (I work for
> Sourcefire). I've seen much much higher performance with 100% pure 64
> byte packets. With performance increasing the bigger the packet size.
>
> In production I've seen the 9900 pass full 10 gigs of traffic.
>
>
> Sent from my iPhone
>
> On Jul 13, 2010, at 11:35 AM, Jeffrey White
> <Jeff.WhiteRaymondJames.com> wrote:
>
>> Just a note regarding the 3D9900 sensors. During our testing, with
>> security over connectivity signatures enabled, we saw a little over
>> 1.6Gb of actual throughput before the device was dropping traffic.
>> Sourecfire stated that their IMIX testing did not include packet sizes
>> of 64 bytes so the numbers on their site are a bit misleading in my
>> opinion.
>>
>>
>>
>> -----Original Message-----
>> From: listbouncesecurityfocus.com
> [mailto:listbouncesecurityfocus.com]
>> On Behalf Of Joel Esler
>> Sent: Monday, July 12, 2010 5:17 PM
>> To: Curt Purdy
>> Cc: Mr. Karim; focus-idssecurityfocus.com
>> Subject: Re: Whatever happened to 10gb IPS?
>>
>> Sourcefire has a 10 gig sensor in it's 3D9900 and has for some time.
>> Two 3D9900s connected are for 20 gig.
>>
>>
>> Sent from my iPhone
>>
>> On Jul 12, 2010, at 1:47 PM, Curt Purdy <infosysecgmail.com> wrote:
>>
>>> The last time we did an evaluation, which was a few years ago, we
>>> found the fastest was Tipping Point, but the standard at that time
> was
>>> 1 Gb. I believe they do 10 Gb now.
>>>
>>> Curt Purdy CISSP, GSNA, GSEC, MCSE+I, CCNA
>>>
>>>
>>>
>>> On Mon, Jul 12, 2010 at 3:42 AM, Mr. Karim <aseeker03gmail.com>
>> wrote:
>>>> A long time ago, there was considerable discussion about IPS sensors
>>>> that could decode 10gb Ethernet traffic. I was wondering if anyone
>> has
>>>> recently validated any IPS sensors that can actually inspect 10GB
>>>> worth of traffic, full duplex (20gb)?
>>>>
>>>> Thanks
>>>> H
>>>>
>>>> -----------------------------------------------------------------
>>>> Securing Your Online Data Transfer with SSL.
>>>> A guide to understanding SSL certificates, how they operate and
> their
>> application. By making use of an SSL certificate on your web server,
> you
>> can securely collect sensitive information online, and increase
> business
>> by giving your customers confidence that their transactions are safe.
>>>>
>>
> http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;9a80e04e1a
>> 17f194
>>>>
>>>>
>>>>
>>>
>>> -----------------------------------------------------------------
>>> Securing Your Online Data Transfer with SSL.
>>> A guide to understanding SSL certificates, how they operate and their
>> application. By making use of an SSL certificate on your web server,
> you
>> can securely collect sensitive information online, and increase
> business
>> by giving your customers confidence that their transactions are safe.
>>>
>>
> http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;9a80e04e1a
>> 17f194
>>>
>>>
>>
>> -----------------------------------------------------------------
>> Securing Your Online Data Transfer with SSL.
>> A guide to understanding SSL certificates, how they operate and their
>> application. By making use of an SSL certificate on your web server,
> you
>> can securely collect sensitive information online, and increase
> business
>> by giving your customers confidence that their transactions are safe.
>>
> http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;9a80e04e1a
>> 17f194
>>
>>

-----------------------------------------------------------------
Securing Your Online Data Transfer with SSL.
A guide to understanding SSL certificates, how they operate and their application. By making use of an SSL certificate on your web server, you can securely collect sensitive information online, and increase business by giving your customers confidence that their transactions are safe.
http://www.dinclinx.com/Redirect.aspx?36;5001;25;1371;0;1;946;9a80e04e1a17f194

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]