TCP Intercept v/s CBAC (ip inspect)

From: Roberto Fernandez (rofernandez@us.telefonica.com)
Date: Mon Oct 16 2006 - 18:01:51 ART


Friends,

Reviewing lots of things for my next attempt, I came through the find of
that CBAC has been added recently to the lab blue print.

Some of the CBAC functions overlap with the "old" TCP intercept.
Specifically related to the handling of TCP connections and the timers
they use for connections management, for example:

ip intercept watch-timeout v/s ip inspect tcp synwait-time

If we were to speak only about TCP connections, which basic difference
or functionality would you think would make one or the other, the choice
for a solution?

Best Regards,
Roberto



This archive was generated by hypermail 2.1.4 : Wed Nov 01 2006 - 07:29:05 ART