Gigabit link monitoring

[Kyle C Quest]

>What's crucial is the make-up of the traffic: how much is there, how much
>of it matches the filter, and what sort of analysis has to be performed
>for the captured traffic.

Right. I just assumed a high load gigabit network where one bro
would need to do a lot of processing.

Anyway, having several bros monitoring different traffic would
also help...



>We currently have several Bro's monitoring GigEther links.  They don't
>usually have trouble keeping up, and this is running on old hardware.
>However, even LBL's access link is nowhere close to saturated.


________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com