Jim-

You don't say whether you are talking about Windows or Unix, but I'll share some 
experiences with Windows:

The ServerSensor network monitoring process is derived from the BlackICE technology 
that ISS acquired a couple of years ago.  It shows up in TaskMan as a separate 
process, blackd.exe.  This process runs as Low Priority, so the OS will cap its CPU 
utilization at 50%.  That said, if your app is doing something that is both network 
intensive (so blackd.exe maxes out at 50% examining all the packets) and CPU intensive 
(so that the app itself wants lots of CPU), it is very possible to peg the CPU.  
Fortunately, we have only seen it on older hardware.  All of our newer, faster boxes 
seem to handle it without a problem.

- - - - - - - - -
Michael A. Vance, CISSP
mailto:[EMAIL PROTECTED]

>>> "Mohr James" <[EMAIL PROTECTED]> 02/12/2004 06:04:58 AM >>>
Hi All!

I am in the process of re-installing a number of agents and I was curious about any 
loss of performance when I activate the network monitoring portion of the sensor. Does 
it cause any major performance problem or is the decrease in performance minimal? 
Also, should be active it now and want to change it later (or the other way), how can 
we do it?

Thanks in advance.

Jim Mohr

ELAXY Brokerage & Trading GmbH & Co KG
_________________________________
James Mohr
Systembetrieb
Am Hofbr�uhaus 1
96450 Coburg 
Germany
Fon +49 (0) 95 61.55 43.0
Fax +49 (0) 95 61.55 43.302
E-Mail: [EMAIL PROTECTED] 
---------------------------------------
"Be more concerned with your character than with your
reputation. Your character is what you really are while
your reputation is merely what others think you are." -- 
John Wooden
---------------------------------------
Be sure to visit the Linux Tutorial:
http://www.linux-tutorial.info 

_______________________________________________
ISSForum mailing list
[EMAIL PROTECTED] 

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo 

This E-Mail has been scanned for viruses.


_______________________________________________
ISSForum mailing list
[EMAIL PROTECTED]

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo

Reply via email to