[Bro] 100G question

Darrain Waters dwaters at bioteam.net
Thu May 11 17:48:46 PDT 2017


My customer will be installing a 100G I2 port @ multiple sites. I have
specced a 5 node cluster using Arista Danz and myricom 10G cards with SNF
license. The 100G will be tapped using a ixia passive tap. I have built and
installed this set up for a previous customer, which was based on the
Berkeley Lab set up.

Apparently, someone @ corelight has told my customer that this type of BRO
100G cluster setup is not necessary. Further, the corelight person said
that one of the corelight appliances would be able to handle 100G.

Is there a new standard for inspecting 100G, and is corelight BroBox
capable of inspecting 100G flows ?

Thank you
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170511/d49d7f1f/attachment-0001.html 

More information about the Bro mailing list