Q: How do I know of my IS has enough processing power to process all the packets it hears?
A:
On the DC, go into operations / monitoring / performance / IPS.
Choose the IS you want to look at, choose the '% packets dropped' graph, and choose a suitable time period. The resulting graph will show you if and when packets got dropped because Snort couldn't handle them.
1 Comments:
what does IS mean ?
Post a Comment
<< Home