[nsp] MD5 causes biggern problem than it fixes?

Dan Hollis goemon at anime.net
Wed Apr 21 15:31:44 EDT 2004


On Wed, 21 Apr 2004, Edward Henigin wrote:
> Regardless of that hurdle, I don't see filtering as a realistic
> approach, due to, again, the ease of a CPU DOS when you have filters
> in place.  IIRC, my Ciscos do NOT do line-rate ACLs...

How much CPU does RPF take?

-Dan



More information about the cisco-nsp mailing list