in

eEye Digital Security

The endpoint to vulnerability starts here.

 

Intrusion Prevention - What does it do?

Last post 07-10-2007 3:18 PM by Dirigible. 14 replies.
Page 1 of 1 (15 items)
Sort Posts: Previous Next
  • 06-06-2007 11:36 PM

    Intrusion Prevention - What does it do?

     So I have the Beta 3.1 installed on XP Home machine.  I noticed my browsing, (more importantly downloading) had really come to a screech.

    Went to a speedtest site where it showed my download speeds were running between 186 and 250 kbps and my upload speeds were 384 kbps, and my ISP says almost 5 mbps.

    http://www.speedtest.net/result/135724391.png

    Shut down various Blink Protections until I got the  speed back. It was Intrusion Prevention that was killing me.  It makes sense to me, because a speedtest is nothing more then a site shooting crap at me to see how fast I am, BUT when I request a download file, it also slows me down.  Across the board, podcasts through Itunes, updates of programs, new programs and files.

    http://www.speedtest.net/result/135718522.png 

    So my questions are, since I believe I should have it enabled, what would be the proper settings for it that will not slow me down?  Is there a way for me to reset to Default if I made changes in it?  Is there a FAQ about it yet that I can read? Yes, I might have missed it.

     

    Thanks for a great product.  No other issues yet, that I have noticed. 


    Marc
  • 06-07-2007 4:48 AM In reply to

    Re: Intrusion Prevention - What does it do?

     What kind of PC are you running Blink on?

    Namely what type and speed of processor ?

    How much RAM memory do you have installed?

     

    -Herb 

  • 06-07-2007 6:51 AM In reply to

    Re: Intrusion Prevention - What does it do?

     Specifically an eMachines T3065 with an AMD Athalon XP Processor 1.3 Ghz with 1.5 GB memory installed.

     

    My own home personal computer, no work environment, but on my own local network.

     

    Thanks Herb. 

    Marc
  • 06-07-2007 4:52 PM In reply to

    Re: Intrusion Prevention - What does it do?

     I've just run the same test with and without Blink.

    I have an Athlon 2000+ (ASUS A7V-333) with 768 MB RAM and Windows 2000 Pro SP4+all Windows Update patches.

    MY net link is via Verizon Online DSL ; modem reports last connect link speed as 2752 kbit/sec downstream and 672 kbit/sec upstream.

    With Blink 3.1 running I got 1534 down and 419 up. with 111 milliseconds latency.

    Blink disabled:  2300 down and 531 up  with 44 ms latency.

     

    Let's see what eEye has to say :) .

     

    -Herb


     

  • 06-07-2007 5:28 PM In reply to

    Re: Intrusion Prevention - What does it do?

    Interesting issues but sadly I see none of them on my cable connection:

     

    16597 Down

    2434 up

     

  • 06-07-2007 7:02 PM In reply to

    Re: Intrusion Prevention - What does it do?

     I found this thread to be interesting and tested it my self. My Comp Specs are as follows..

    Property    Value
    Manufacturer    Gigabyte Technology Co., Ltd.
    Model    GA-M51GM-S2G
    Version    x.x
    Serial Number    Tue May 30 22:23:35 2006
       
    Chipset Vendor    Nvidia Corp
    Chipset Model    C51 PCI Express Bridge
    South Bridge    MCP51 LPC Bridge
       
    CPU    AMD Athlon 64 X2 3800+
    Cpu Socket    Socket AM2 [Socket M2]
    Processor Upgrade    ZIF Socket
    Max CPU Speed    4000 MHz

    RAM is Dual Channel
       
    Device Locator    A0
    Bank Locator    Bank0/1
    Capacity    1024 MBytes
    Speed    400 MHz
    Data Width    64 bits
    Form Factor    DIMM
    Total Width    64 bits
       
    Device Locator    A1
    Bank Locator    Bank2/3
    Capacity    1024 MBytes
    Speed    400 MHz
    Data Width    64 bits
    Form Factor    DIMM
    Total Width    64 bits
       
    Windows XP (Professional) Service Pack 2

     I ran tests with Intrusion Prevention off and compared to it being on, no change in speed up/down worth noting.

    2885 vs 2855 down

    700 vs 687 up 


     








     

  • 06-08-2007 1:07 PM In reply to

    Re: Intrusion Prevention - What does it do?

    Sorry, the email notification doesn't seem to be working for this forum, yet. Not for me, anyway. Is it working for anyone else?  At least the forum likes Firefox though.

     

    One other thing, that might be of use. I usually run as Limited User also.   Will test again and see what happens. FYI, www.speedtest.net is the one I've tested it out with.

      with it on.

    with it off.  hmmm 

    Marc
  • 06-08-2007 1:29 PM In reply to

    Re: Intrusion Prevention - What does it do?

      OFF

     

    with it turned on.

    OUCH. 

    Marc
  • 06-09-2007 3:29 AM In reply to

    Re: Intrusion Prevention - What does it do?

    Blink Enabled Blink DISABLED

    Blink Disabled Blink ENABLED

     

    The major difference is the latency, which makes sense since Blink is processing the packets.

     

    EDIT Sorry made a mistake and swaped the disabled and enabled around.
     

  • 06-11-2007 8:54 AM In reply to

    Re: Intrusion Prevention - What does it do?

    So, how do I get around that, HuangkerYOUR latency's  tripled when you disabled AND  your speed dropped when you disabled? Is that correct?  Mine goes the other way, then your examples.

    My latency's even at 4:07 didn't even double yet my speed dropped tremendously.  I'm sorry,  I just don't understand what I can do.

    Do  I run without Intrusion Prevention? Yes, for now, 200kb/s is totally unacceptable for my costs for access.

     

    Is anyone from eEye checking in here, yet? 

    Marc
  • 06-14-2007 6:49 AM In reply to

    Re: Intrusion Prevention - What does it do?

     So I found the Reset Configuration option under the Tools menu.  Made no difference with Intrusion Prevention slowing down the Internet.  Still running it disabled because of this issue.

     

    Anybody have any ideas or settings I should adjust? 

    Marc
  • 06-15-2007 1:12 AM In reply to

    • serv
    • Top 25 Contributor
    • Joined on 06-14-2007
    • European Union
    • Posts 41

    Re: Intrusion Prevention - What does it do?

    Just two possible ideas mtz4of12.

    Nr.1 - "PPP over Ethernet (short: PPPoE) implementation for Microsoft Windows®" by Robert Schlabbach http://www.raspppoe.com/ could be one, not easy very easy to implement but with good results. Usefull informations and a good FAQ there too. Free of charge for non-commercial private purposes ;)

    Nr.2 - This one ist not free but much easyer to install http://www.cfos.com . Two versions and a good FAQ as well. All of that Solutions are in use here, but just cFosspeed with Blink and not difference with or without Intrusion Prevention

    Regards
    Serv B.

  • 06-18-2007 12:54 AM In reply to

    Re: Intrusion Prevention - What does it do?

    I get same results with or without blink running.

    Last Result:
    Download Speed: 14572 kbps (1821.5 KB/sec transfer rate)
    Upload Speed: 821 kbps (102.6 KB/sec transfer rate)
  • 06-25-2007 6:10 AM In reply to

    Re: Intrusion Prevention - What does it do?

     Thanks serv, I may take a look at that.

    Marc
  • 07-10-2007 3:18 PM In reply to

    Re: Intrusion Prevention - What does it do?

    Effect of the Intrusion Prevention rule 110139:  "Internet Explorer IFRAME Overflow" (on IP Signatures page) on dl/ul speed

     
    RuleID 110139 UNCKECKED (default setting)

     

    RuleID 110139 CHECKED


    Quite a slowdown.


    Similarly, RuleID 110165 CHECKED (110139 unchecked=default)


    .. about half speed


    (I hope the links work here -- my first attempt and apparently no way to preview)


Page 1 of 1 (15 items)
© 1995 - 2009 eEye Incorporated