NCSA's Slagell guest blogs on Blue Waters and Bro

Traditional security technologies like inline intrusion prevention systems, stateful firewalls, and security appliances can take a 10 Gbps connection down to 500Mbps easily. NCSA, which has well over 100 Gbps of external WAN connections (and plans to go to 300 Gbps), can't come close to operating efficiently with those kinds of bottlenecks. Instead NCSA relies on passive monitoring techniques, making heavy use of ICSI's open-source Bro network security monitor to understand and protect its network.