This is exactly how RS works. If you are concerned about contact with the
console, put larger hard drives in your engines so they can go longer
gathering info. The only problem is if the files get huge on the engines,
you have to pull all that to the console to analyze it when it comes back
online. RS does a straight transfer of the log files, so if your log
files are 2 gigs worth per engine, if you have 5 engines you will be
essentially moving 10 gigs of data to the console.
The 65-70Mb's is the realy "bite" in this whole plan. I know PC engines
running NT won't come anywhere near seeing that.
Carric Dooley
COM2:Interactive Media
http://www.com2usa.com
On Wed, 7 Jul 1999, SiOL CERT wrote
>
> What we basically need is an IDS system that has centralised management
> station and several remote probes. Each of the probes has to be able to save
> data on it's own disks in case the main management station is unreachable,
> also each probe has to survive and monitor the network even if the main
> station is unreachable for longer than a set amount of time. The IDS has to be
> able to scan thru peak traffic which many times reaches 65-70Mbit/s, and has
> to monitor fragmented packets and reassable them.
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
