why???

[Dornbrook, Nathan]

I also forgot to mention this:

Vern (and others) are pushing forward the general state of the technology
available to us.

It is a frustrating process for all conerned, with intermittent, but
substantial, rewards, mostly in the form of the warm fuzzy feeling that
comes when a tough problem is elegantly solved.

For those who successfully commercially package their project, it also has
substantial financial implications.

Vern, keep up the fight. I'm really chuffed to see bro as an option,
fighting for survival and acceptance.

Cheers!

Nathan Dornbrook
Head of Telecoms Network Security
Royal Bank of Scotland
Regus House, 10 Lochside Place 
Edinburgh Park, Edinburgh
EH12 9RG
* 0131-523 9299 
e*  dornbrn at rbos.co.uk


-----Original Message-----
From: Dornbrook, Nathan 
Sent: 01 May 2002 20:51
To: 'bro at lbl.gov'
Subject: RE: why??? 


*** Warning: This message originates from the internet ***

Warning: This email does not reflect the opinions of the Royal Bank of
Scotland nor her subsidiary companies nor affliates.

To be honest, I didn't understand the question.

Generally, I just lurk, keeping tabs on bro to see when and if it will
become a viable option for commercial implementation at a large institution
like the Royal Bank (as snort has become).

It's not that no one cares, it's just that no one else's problems are as
important as one's own.

If bro is frustrating you, take a look at snort, Dragon, NetRanger and ISS
RealSecure (in that order).

Nathan Dornbrook
Head of Telecoms Network Security
Royal Bank of Scotland
Regus House, 10 Lochside Place 
Edinburgh Park, Edinburgh
EH12 9RG
* 0131-523 9299 
e*  dornbrn at rbos.co.uk


-----Original Message-----
From: Vern Paxson [mailto:vern at icir.org]
Sent: 01 May 2002 18:56
To: jd ls
Cc: bro at lbl.gov
Subject: Re: why??? 


*** Warning: This message originates from the internet ***

> It's because nobody in the bro mailing list answered. My guess is that
it's 
> just you and I are the only ones subscribed to the bro mailing list...

There are 205 people subscribed to the list.

The original poster didn't give enough context to understand just what
they were asking (at least for me).  Questions generally get answered
(sometimes it takes a while), or are retracted (which happened recently
when the poster subsequently solved their own problem).

The only pending thread on the list of which I'm aware is that from the
messages sent a couple of weeks ago by Ashley Thomas (regarding
fragmentation
reassembly).  I mean to reply to those, but it will take me a while to
find the cycles to do so, due to day job crunches.

		Vern


The Royal Bank of Scotland plc is registered in Scotland No 90312.
Registered Office: 36 St Andrew Square, Edinburgh EH2 2YB. Agency agreements
exist between members of The Royal Bank of Scotland Group. The Royal Bank of
Scotland plc is regulated by IMRO, SFA and Personal Investment Authority.

This e-mail message is confidential and for use by the addressee only. If
the message is received by anyone other than the addressee, please return
the message to the sender by replying to it and then delete the message from
your computer. Internet e-mails are not necessarily secure. The Royal Bank
of Scotland plc does not accept responsibility for changes made to this
message after it was sent. 

Whilst all reasonable care has been taken to avoid the transmission of
viruses, it is the responsibility of the recipient to ensure that the onward
transmission, opening or use of this message and any attachments will not
adversely affect its systems or data. No responsibility is accepted by The
Royal Bank of Scotland plc in this regard and the recipient should carry out
such virus and other checks as it considers appropriate.