After reading this FAQ I have a couple questions. -If the box is running in eth promiscuous mode and using monitor mode splitters how could it slow down any traffic.. it simply passes by the port and is recreated? -In the FAQ they claim there is no IP stack .. so how can it have ip based filters to let in traffic .. or is this all done with custom software? -I have not been asked ( yet ) to put one in place, can someone give a very brief time line of events and where they were asked to put it on their network? -I know this is redundant, but why even do it when PGP and SSH are so readily available? thanks for any input Benny Fischer Chief Technical Officer Infinet Internet Services benny@infinet-is.com 480-394-0647
-----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of John Hasty Sent: Monday, September 17, 2001 1:48 PM To: nanog@merit.edu Subject: Re: Yahoogroups and Carnivore
Here is a very good and through FAQ about Carnivore
http://www.robertgraham.com/pubs/carnivore-faq.html
-- John Hasty Network Operations Supervisor HiWAAY Information Services jhasty@hiwaay.net