[Bro] packet broker

[Seth Hall]

On Jun 23, 2014, at 3:49 PM, Matt Stucky <mattchess50 at gmail.com> wrote:

> Anyone have experience with some of the packet brokering solutions out there such as Cpacket, Gigamon, VSS, Arista (with DANZ), etc.?  How well do they handle bursting, micro bursting when aggregating multiple taps?  

No one that I know of has good information about this stuff.  Unfortunately because you're asking about functionality at the very edge of a devices functionality I think you'd have a hard time getting good answers from all of these companies themselves too (although I would love if one of these companies is on the list and they speak up and tell us how they've tested the edge of capability of their devices!).

> How much packet loss do you see due to buffer overflows on the packet brokering device?


I would hope no more than the output interfaces could handle. :)  Unfortunately this fits into the same bucket regarding capability limits.

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140624/a232e42d/attachment.bin