Re: WG status 2003/08/13

Pekka Savola wrote:
> 

> 
>  2) iTrace is relatively lightweight, some vendors' ACL implementations
> can't handle linespeed.  E.g. with STM-16 (2.5 Gbit/s) interface, iTrace
> might result in some 10-20 iTrace packets a second.  Could be doable even
> on sloppy CPU's if there are no crypto requirements :-)
> 
At 10-20 iTrace packets a second, even with HMAC-MD5, the CPU
consumption
  from the HMAC computation will be down in the noise.

Look at the "Performance Assumptions" section of RFC3562 to get an
  idea of MD5 performance numbers.

-- 
----------------------------------------------------------------------
Marcus Leech                             Mail:   Dept 8M70, MS 012, FITZ
Advisor                                  Phone: (ESN) 393-9145  +1 613
763 9145
Security Architecture and Planning       Fax:   (ESN) 393-2754  +1 613
763 2754
Nortel Networks                          [email protected]
-----------------Expressed opinions are my own, not my employer's------