If this is just for post analysis and you have another system (IDS) to identify the timeframe, a tape based system might be a better approach, esp if you want to retain forever. Maybe "Library LTFS"
----- Original Message ----- From: "John T. Yocum" <john.yo...@fluidhosting.com> To: "Valdis Kletnieks" <valdis.kletni...@vt.edu> Cc: nanog@nanog.org Sent: Thursday, April 12, 2012 5:37:38 PM Subject: Re: Network Storage On 4/12/2012 2:34 PM, valdis.kletni...@vt.edu wrote: > On Thu, 12 Apr 2012 14:18:30 -0700, "John T. Yocum" said: >> In that case, just keep adding disks to you capture system, or use a NAS >> to do it. > > On Thu, 12 Apr 2012 13:43:49 -0700, Joel jaeggli said: >> 1TB is 2.276 hours at 1Gb/s > > If he's got a gigabit of traffic, he's going to be adding another shelf of 12 > 1T > drives to that NAS - every day. If he gets the high-density shelves with 60 > drives, > he's only adding one a week. > > He's going to have to work smarter, not harder. He did indicate he's only storing the headers and a few bytes, not the full payload. --John
