[Snort-users] High Speed Network Cards + rules?

Adriel T. Desautels atd at ...10635...
Mon May 24 11:19:17 EDT 2004


Greetings list,
	It is my understanding that most network cards at 50% capacity begin to
miss packets and create a false negatives condition (IDS evasion technique).
Is anyone aware of any cards that exist that collect 100% of the traffic
with 0% false negatives due to this condition?  If not, what is the next
best thing?

	Secondly, does anyone know of any other snort rule repositories aside from
those presented at snort.org?

Adriel T. Desautels
Secure Network Operations
Embracing the future of technology, protecting you.
Office: 978-263-3829    Fax: 978-263-3313
atd at ...10635...   www.secnetops.com






More information about the Snort-users mailing list