nanog mailing list archives

Re: open source DPI suggestions?


From: "Leigh Porter" <leigh.porter () ukbroadband com>
Date: Sat, 7 May 2011 08:50:22 +0100

I gotta say that those microtik boxed are pretty impressive. I have quite a few that give me Layer 2 VPN in the lab and 
they have been faultless so far.


-- 
Leigh Porter


On 6 May 2011, at 21:46, "Francois Menard" <francois () menards ca> wrote:


How about RouterOS from Mikrotik ?

You cannot beat a $70 RB750G for doing P2P hijacking.

F.

On 2011-04-29, at 8:59 AM, Kornelijus Survila wrote:

Snort (http://www.snort.org/) is also a nice IDS. They provide paid and free
rules/signatures.

-k

On Fri, Apr 29, 2011 at 7:55 AM, Raymond Burkholder <ray () oneunified net>wrote:

Can anyone suggest any open source DPI (deep packet inspection)
projects?


I'll recommend Bro-IDS (http://www.bro-ids.org/) as it's what I spend my
days working on.  It's essentially a programming language for long term
network traffic monitoring which is focused on doing deep decoding of
application layer protocols.  (and it's BSD licensed!)


http://l7-filter.sourceforge.net/ might be another candidate.


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.






______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________


Current thread: