Does nSight sample?

jeff-it_at_hush.com
Date: 10/20/05

  • Next message: kgeorgiades_at_toplayer.com: "RE: location of an IPS" 
    Date: Thu, 20 Oct 2005 13:29:42 -0700
To: <focus-ids@securityfocus.com>

    Hi all,

    I work for a non-profit agency in Texas. We've been using nSight
    (http://www.intrusense.com/products) for a little over 2 months
    now. Over the last 2 weeks we started noticing a bit of a slow down

    when accessing the Internet. After checking nSight it became
    obvious the slowdown was from a lot of BitTorrent traffic coming
    from 2 machines in a lab. According to nSight the 2 machines have
    transfered nearly 135GB in the last 11 days via BitTorrent.

    Because people sign in to use the computers were we able to match
    the spike in traffic in nSight with the person who signed in.
    Someone is probably going to be fired for this as when we checked
    the computers, there were a hundred or more tv shows and movies.

    Now my question is this; Is this an exact ammount or does nSight
    sample data and come up with an estimate? I want to make sure I
    have my facts straight.

    Thanks in advance,
    Jeff.

    Concerned about your privacy? Instantly send FREE secure email, no account required
    http://www.hushmail.com/send?l=480

    Free, ultra-private instant messaging with Hush Messenger
    http://www.hushmail.com/services-messenger?l=434

    ------------------------------------------------------------------------
    Test Your IDS

    Is your IDS deployed correctly?
    Find out quickly and easily by testing it
    with real-world attacks from CORE IMPACT.
    Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
    to learn more.
    ------------------------------------------------------------------------

  • Next message: kgeorgiades_at_toplayer.com: "RE: location of an IPS"