"I Write Mass Surveillance Software"

Michael Holstein michael.holstein at csuohio.edu
Thu Sep 17 12:35:29 PDT 2009


>http://www.reddit.com/r/IAmA/comments/9kwph/i_am_a_guy_who_writes_covert_software_that_runs/
>
>Thoughts?

The mention of "C like" code and the DPI makes me think the hardware 
uses Intel's IPX series network processors. For those, the ruleset is 
basically written in C and uploaded to the device.

SANS has a whitepaper on doing Snort IDS with them, a fairly similar 
application to the above (this is for the 24xx series @ 2.5gbps)

http://www.sans.org/reading_room/whitepapers/detection/intel_ixp_network_processor_based_intrusion_detection_32919

The IXP2800 can do line-rate 10gbps
http://download.intel.com/design/network/ProdBrf/27905403.pdf

Cheers,

Michael Holstein
Cleveland State University

----- End forwarded message -----
-- 
Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE





More information about the cypherpunks-legacy mailing list