Gigabit link monitoring

Kyle C Quest mazequest at
Tue Jul 25 07:40:53 PDT 2000

>What's crucial is the make-up of the traffic: how much is there, how much
>of it matches the filter, and what sort of analysis has to be performed
>for the captured traffic.

Right. I just assumed a high load gigabit network where one bro
would need to do a lot of processing.

Anyway, having several bros monitoring different traffic would
also help...

>We currently have several Bro's monitoring GigEther links.  They don't
>usually have trouble keeping up, and this is running on old hardware.
>However, even LBL's access link is nowhere close to saturated.

Get Your Private, Free E-mail from MSN Hotmail at

More information about the Bro mailing list