[Bro] 100G question

[Slagell, Adam J]

Darrain,

Also, please feel free to contact me at the NCSA for some independent advice about Bro @ 100G. NSF funds the project to help EDUs and NSF projects.

Cheers,
Adam Slagell

> On May 11, 2017, at 7:48 PM, Darrain Waters <dwaters at bioteam.net> wrote:
> 
> All
> 
> My customer will be installing a 100G I2 port @ multiple sites. I have specced a 5 node cluster using Arista Danz and myricom 10G cards with SNF license. The 100G will be tapped using a ixia passive tap. I have built and installed this set up for a previous customer, which was based on the Berkeley Lab set up. 
> 
> Apparently, someone @ corelight has told my customer that this type of BRO 100G cluster setup is not necessary. Further, the corelight person said that one of the corelight appliances would be able to handle 100G.
> 
> Is there a new standard for inspecting 100G, and is corelight BroBox capable of inspecting 100G flows ? 
> 
> Thank you
> 
> 
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3579 bytes
Desc: not available
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170512/1b5a2db3/attachment.bin