Oversubscribed IDS port

[sunetra]

If the aggregate performance of an IDS port is overshot, how are the excess packets handled?

Thanks

[klwiley]

They will be dropped by the system. If the drop rate during the drop statistic interval ever exceeds 1% of the total received traffic a 993 alert will be generated to alert the user to the oversubscribed condition.