[nsp] NBAR

[Matti Saarinen]

rpcbind at speakeasy.net writes:

> On Thu, 12 Jun 2003, mac wrote:
>
>> Some one know when nbar will be a usefull, stable and well supported 
>> technology in IOS. Now is a unstable piece of crap.
>
> What problems are you having with it?

     I tried it on 6509. I worked fine until we were hit by yet
     another DDoS. The volume of the attack was only about 130 Mbit/s
     but the 6509 was almost killed. When I turned nbar off, the box
     could again cope with the traffic and with the attacks, too.


-- 
- Matti -