Ethernet White Papers
Design Alternatives for a High-Performance Self-Securing Ethernet Network Interface
Overview This paper presents and evaluates a strategy for integrating the Snort network intrusion detection system into a high-performance programmable Ethernet Network Interface Card (NIC), considering the impact of several possible hardware and software design choices. While currently proposed ASIC, FPGA, and TCAM systems can match incoming string content in real-time, the system proposed also supports the stream reassembly and HTTP content transformation capabilities of Snort. This system, called LineSnort, parallelizes Snort using concurrency across TCP sessions and executes those parallel tasks on multiple low-frequency pipelined RISC processors embedded in the NIC. LineSnort additionally exploits opportunities for intra-session concurrency. The system also includes dedicated hardware for high-bandwidth data transfers and for high-performance string matching.
| Publisher | Institute of Electrical and Electronics Engineers | File Format | |
|---|---|---|---|
| Date Published | January 2007 | ||
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful? 14 out of 23 users found this white paper useful
White Paper RSSContact Centres: Optimum service at optimum cost
DownloadGetting the balance right between meeting the inbound call expectations of busy customers and optimising telecoms costs is the goal for many ICT managers. Technology now enables far more powerful...
Shared Services: The Practicalities of Local Council Cost Reduction
Local government in the UK has been undergoing modernisation initiatives centred on IT. Substantial investments have been made in digitising the way that local government delivers public services, managesoperations and...
802.11n: The End of Ethernet?
The Institute of Electrical and Electronics Engineers (IEEE) 802.11n standard represents the beginning of the end for wired Ethernet as the dominant Local Area Network (LAN) access technology in the...
Innovation Network Lecture Series: The Journey Towards the Converged Data Center - Fibre Channel over Ethernet (FCoE) and ISCSI
For decades, the IT industry has tried out a number of technologies, looking for one that can provide a single network that could accommodate all traffic needs. Ethernet has long...
A Clear Path to 100Gigabit Ethernet on the Alcatel-Lucent Service Router Portfolio
In helping service providers profitably meet the massive bandwidth demands driven by explosive growth in video traffic and sophisticated consumer and business IP services, Alcatel-Lucent is the first to deliver...
