Seems like that *is* the question.
Dan Hollis
<goemon To: Edward Henigin <ed at texas.net>
@anime.net> cc: cisco-nsp at puck.nether.net
Sent by: Subject: Re: [nsp] MD5 causes biggern problem than it fixes?
cisco-nsp-bounce
s
04/21/2004 03:31
PM
On Wed, 21 Apr 2004, Edward Henigin wrote:
> Regardless of that hurdle, I don't see filtering as a realistic
> approach, due to, again, the ease of a CPU DOS when you have filters
> in place. IIRC, my Ciscos do NOT do line-rate ACLs...
How much CPU does RPF take?
-Dan
_______________________________________________
cisco-nsp mailing list cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/