Security Basics: Re: Considering nSight, any thoughts?

[Steven Rakick <stevenrakick () yahoo com>]

Jason, I did respond, but to another list. Here's my
post just in case...

-
Jason,

Been running nSight for a little over a year now with
data purge after 13 months. We have 3 agents at remote
offices with each inspecting the traffic of around
700-900 hosts. It's been quite helpful. We *had* a ton
of P2P traffic in our networks.
 
When we started out last year, we tried to host all 3
agents on a low end HP blade (with a laptop hd). After
about 2 months it became very slow (mostly due to disk
IO). We upgraded to a faster blade with fast SCSI disk
and it's been flying along ever since.

Also, according to another poster (Darrin Maidlow) on
Full Disclosure, there is a beta program in place
right now for nSight 2.0 at
http://www.intrusense.com/products/beta. I'm not sure
if you're evaluating 2.0 or 1.x.
 
Steve

--- Jason Heschel <jason.heschel () gmail com> wrote:

> Hello list,
>
> We've spent the last few weeks evaluating nSight (a
> network analysis
> package from Intrusense) and are now considering
> making a purchase.
>
> I'm curious to hear any opinions, problems or praise
> people have for
> this software. Does it scale well? How does it
> perform after
> collecting several months worth of data?
>
> -jason

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com