Hi Markus,
Can you explain what you mean by "line speed" ?
I was under the assumption that snooping packets all the way up to the
application
layer by a OPES box would be pretty expensive in any case (irrespective
of what
you do with that content. Sure - certain operations can be more
expensive than others.)
- Jayanth
Markus Hofmann wrote:
Hilarie Orman wrote:
There's experience is that it is not too expensive to parse message
bodies. It is, however, a very limited form of parsing, one that
could be more accurately described as lexical analysis. Only the
tags needed for the current set of rules need be lexed.
Can you do that at "line speed"? Probably time to come up with the
scenario document, properly derive the requirements (including some
performance assumptions) and then try to answer the question.
-Markus
--
Jayanth P. Mysore
Networks and Infrastructure Research Laboratory,
Motorola Labs
Phone : (847) 576-8561