Hi Folks,
yes very true latency play important role in Highspeed
networks when we deploy IPS in line. Latency can be
termed as the time taken by the IDS/IPS engine to
process the incoming packet and put it on to the
interface to let it GO to the destination or deny
depeding upon the rules configured for the packet
under inspection. As far as network bursts goes we are
talking about the combination of perfomrance and
processing capabilitites of IDS/IPS engine as well as
the Hardware Memory and processing capabilities.
,Thanks for point ting this out .
regards
tcpfin.
--- Stefano Zanero <stefano.zanero_at_ieee.org> wrote:
> tcp fin wrote:
>
> > 2. Throuput (If its Inline)
>
> Actually, if the IDS is IN line you actually want to
> care about the
> _response time_ of the device (i.e. the additional
> delay it adds to
> packet RTT times), which is not exactly the same
> thing as the throughput.
>
> If the IDS is _on line_ but not _in line_ (i.e. a
> pure sniffer, not
> acting as a gateway, like most IDS products with no
> IPS capabilities)
> you must all the same take into account the
> _throughput_ of the device,
> since if the throughput is not high enough, the
> device will lose
> packets, and therefore lose attacks.
>
> You must also remember that even if your average
> network usage is some X
> value, you must take into account network bursts,
> and do appropriate
> capacity planning studies.
>
> Stefano
>
>
--------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with
> real-world attacks from CORE
> IMPACT.
> Go to
>
http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
>
--------------------------------------------------------------------------
>
>
__________________________________
Do you Yahoo!?
Yahoo! Mail is new and improved - Check it out!
http://promotions.yahoo.com/new_mail
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------
Received on Aug 16 2004
Intro
