[Snort-users] Missed Alerts

Ed Greshko Edward.M.Greshko at ...1974...
Mon May 7 08:46:49 EDT 2001


Has anyone done any work to determine the percentages of missed alerts?  i.e.
alerts not being recorded when they are known to have taken place.

Along those same lines, does anyone have guidelines as to what type of HW one
needs to reduce the percentages of missed alerts when the links being
monitored are being utilized at given levels.

Yes, I'm trying to size a system for production use.  :-)


More information about the Snort-users mailing list