Firewall Wizards: RE: Re: cost of frame relay snooping

["Krammes,Jim" <jim.krammes () cnalife com>]

A company called EmCom out of Plano TX makes a box called a NET/QC which
is capable of real-time frame grabbing off of frame-relay (and HDLC,
too) lines. It is intrusive (requires a V.35 T-Cable and retiming
module) and obviously requires physical access. Our 12-line system cost
us around $100,000US. 

There is a portable version available that's presumably less expensive.

- Jim

---------------------------------------
V. James Krammes
Manager, Network Development
CNA Life Insurance Companies
---------------------------------------


> -----Original Message-----
> From: dnewman () data com [SMTP:dnewman () data com]
> Sent: Sunday, November 02, 1997 8:37 PM
> To:   firewall-wizards () nfr net
> Subject:      RE: Re: cost of frame relay snooping
>
>
> > Has anyone done any cost assessments about how much it takes to 
> > snoop on frame relay lines? 
> In addition to Ted Doty's pointers, several net management vendors
> have adapted 
> RMON probes for use on frame relay. I'm familiar with the ones from
> Netscout 
> (formerly Frontier) and Concord, and Bay (which bought Armon) and 3Com
> (which 
> bought Axon) may have something as well.
>
> One of the RMON groups is capture, and these probes' management
> packages show 
> capture buffer contents using decodes that look the Network General
> Sniffer.
>
> Speaking of the Sniffer, Network General and several other vendors
> (HP, RADcom, 
> TTC, Wandel & Goltermann) have V.35 interfaces for their analyzers.
> Can't vouch 
> for the existence quality of the frame relay decodes, though.
>
> Regards
> David Newman
> Data Communications magazine