62

复杂网络环境中的OSSIM应用-李晨光原创技术博客

 6 years ago
source link: http://blog.51cto.com/chenguang/2092091
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
复杂网络环境中的OSSIM实践目前OSSIM64位版本对于监控10/100M网络环境没有问题，千兆网络环境中，在三层交换机上监控多个VLAN的流量有就有些吃力，交换机设置端口镜像后同样会是CPU占用率上升。具统计，当流量超过500MB/s时，在OSSIM分析数据包时会出现响应迟缓，伴随丢包现象出现，而且准确性迅速下降。1.高速网络中应用在OSSIM中的IDS模块中，流量一大就会出现数据处理瓶颈。数

report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK