topic Bandwidth Limitations in Network Security https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657474#M88150 <P>My current configuration is two CAT 6500's with 1 IDSM installed in each monitoring different VLAN's through SPAN. My question is what happens when there is say "too much" traffic? traffic is not qued is it? or is it left alone to pass. I dont want to introduce any latency/bottlenecks to the network. I cant seem to find any documents on how they react to situations like this. Any help would be great thank you. </P> Sun, 10 Mar 2019 10:21:22 GMT anthonysgroi 2019-03-10T10:21:22Z Bandwidth Limitations https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657474#M88150 <P>My current configuration is two CAT 6500's with 1 IDSM installed in each monitoring different VLAN's through SPAN. My question is what happens when there is say "too much" traffic? traffic is not qued is it? or is it left alone to pass. I dont want to introduce any latency/bottlenecks to the network. I cant seem to find any documents on how they react to situations like this. Any help would be great thank you. </P> Sun, 10 Mar 2019 10:21:22 GMT https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657474#M88150 anthonysgroi 2019-03-10T10:21:22Z Re: Bandwidth Limitations https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657475#M88152 <HTML><HEAD></HEAD><BODY><P>Normally, if the monitored network traffic/stream is high and beyond the SPAN capability, other traffic will just flow through, not kept in queue and subsequently delayed the traffic flow.</P><P></P><P>This is a nature of SPAN where it will only capture a snapshot of passing traffic, and this works fine in conjunction with IDSM's promiscuous mode that monitor traffic in passive mode. </P><P></P><P>Passive mode cannot drop packets to block a network intrusion attempt, but can send TCP resets to both sides of the network connection to try to break the connection.</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a008055df92.html#wp1067335" target="_blank">http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a008055df92.html#wp1067335</A></P><P></P><P>HTH</P><P>AK</P></BODY></HTML> Wed, 06 Dec 2006 00:59:06 GMT https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657475#M88152 a.kiprawih 2006-12-06T00:59:06Z Re: Bandwidth Limitations https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657476#M88154 <HTML><HEAD></HEAD><BODY><P>Ok thank you very much but that link isnt working for me.</P></BODY></HTML> Wed, 06 Dec 2006 18:11:07 GMT https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657476#M88154 anthonysgroi 2006-12-06T18:11:07Z Re: Bandwidth Limitations https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657477#M88156 <HTML><HEAD></HEAD><BODY><P>Sorry, try this one:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a008055df92.html#wp1067335" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a008055df92.html#wp1067335</A></P><P></P><P></P><P>HTH</P><P>AK</P></BODY></HTML> Thu, 07 Dec 2006 00:53:17 GMT https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657477#M88156 a.kiprawih 2006-12-07T00:53:17Z Re: Bandwidth Limitations https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657478#M88158 <HTML><HEAD></HEAD><BODY><P>Thank you. </P></BODY></HTML> Thu, 07 Dec 2006 03:10:57 GMT https://community.cisco.com/t5/network-security/bandwidth-limitations/m-p/657478#M88158 anthonysgroi 2006-12-07T03:10:57Z