[Discussion] Brainstorming Session Notes

[Thorsten Holz]

On 17.11.2008, at 17:08, Seth Hall wrote:

> I think that *definitely* might be a somewhat overly finite
> statement.  Right now with Bro I'm doing gzip decoding of web traffic
> on 1.1Gbps of total network traffic (we typically see about 60% on
> port 80/tcp) and not dropping packets.

But you are running a whole cluster of machines, don't you? :-)
Can you share some details on what kind of machines you use for Bro?

Cheers,
   Thorsten