Yes, the sFlow is sampled 1 of 32 packets and higher. Yes, IronView can
export all data in real time to a pcap format that snort (locally or
remotely) can read and then send alerts back to the IronView console.
Also Lancope has a StealWatch XE for sFlow.
export all data in real time to a pcap format that snort (locally or
remotely) can read and then send alerts back to the IronView console.
Also Lancope has a StealWatch XE for sFlow.
Thanks,
Scott
-----Original Message-----
F...
[ more ]