Thursday, November 15, 2007

Q: How do I know of my IS has enough processing power to process all the packets it hears?

A:

On the DC, go into operations / monitoring / performance / IPS.

Choose the IS you want to look at, choose the '% packets dropped' graph, and choose a suitable time period. The resulting graph will show you if and when packets got dropped because Snort couldn't handle them.

1 Comments:

Blogger dove said...

what does IS mean ?

1:51 AM  

Post a Comment

<< Home