I would like to know if SGUIL is possible to handle huge amount of traffic
especially in ISP environment with huge traffic load say 300Mbytes per
minute at least.
Under this environment, we would need a huge disk in order to store all the
full content for a certain period of time say 1 week...Is it possible and
practical to store all those data ? Or SGUIL will only store the raw traces
with those IDS alerts being fired ?