Re: NFR Help

[mjr () nfr net (Marcus J. Ranum)]

> My name is Rodolfo Dias, and i am a Brazilian network administrator, last week
> my boss order me to install NFR ver. 2.0.3 research and put some Intrusion
> Detection code to monitor DoS attacks that we have been suffering ... I
> installed it all right, in a 266 PII box w/ 64 Mb

[...]

Please don't evaluate NFR's effectiveness by comparing the
"research" version against commercial products. The commercial
version is a complete intrusion detection appliance, not a
toolkit, and includes far more (and better) filters than the
"research" version. The kind of problems you appear to be having
with setting up the "research" version are unfortunate and are
what the commercial product addresses. If you want to test a
version of the commercial NFR, fill out
http://www.nfr.net/download/eval-request.html
and you'll get a copy of the real thing to test. It's a _whole_
lot better, and comes pre-configured.

Also, unless the network you are monitoring is quite slow, a
P2/266 with 64MB of RAM is not adequate hardware.

mjr.

--
Marcus J. Ranum, CEO, Network Flight Recorder, Inc.
work - http://www.nfr.net
home - http://www.clark.net/pub/mjr