|
IDS
mailing list archives
SourceFire RNA
From: Lior Tal <lior () us-path com>
Date: 2 Dec 2003 10:58:20 -0000
Hi,
Did anyone had a chance to evaluate the RNA published on SourceFire web site?
From what I coule understand, they claim that by passive traffic analysis the RNA can trace every network device,
service and open port within a network. It is difficult for me to understand how can passive traffic analysis detect
inactive devices and services which do not transmit any network traffic?
Can anyone help figure that one?
Lior
US-Path Inc.
---------------------------------------------------------------------------
---------------------------------------------------------------------------
By Date
By Thread
Current thread:
- SourceFire RNA Lior Tal (Dec 02)
|