Re: [Fwd: Re: [Snort-users] tippingpoint]

Geoff wrote:

> We actually use a Cisco FWSM to give us the numbers and then we check
> them against a Toplayer that is doing load balancing for our IDS
> machines.
>
> We can also pull some information out of Netflow.
>
> If you mean how do we generate the connections... wellllll we don't.
> We have about 30,000 students do it for us :).


I can second the notion that putting a device of this type on an
academic institution's Internet connection
can be quite effective at ferreting out bugs, limitations,
effectiveness, and versatility. :)





-------------------------------------------------------
This SF.net email sponsored by: Enterprise Linux Forum Conference & Expo
The Event For Linux Datacenter Solutions & Strategies in The Enterprise
Linux in the Boardroom; in the Front Office; & in the Server Room
http://www.enterpriselinuxforum.com
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users