Product detail

Tool for processing security incidents in private networks

GRÉGR, M.

Product type

software

Abstract

The tool provides plugin extension for the flow monitoring probes that allow to pair traffic before and after address translation process. It allows to connect the probe to a network topology without any change on network devices. Using the data provided by the probe's extension, it is possible to trace back security incidents even though they are identified by the outer IPv4 address.

Keywords

NetFlow probe, Network address translation, NAT, monitoring, data retention

Create date

22. 6. 2016

Location

http://www.fit.vutbr.cz/~igregr/prods.php?id=494

Possibilities of use

K využití výsledku jiným subjektem je vždy nutné nabytí licence

Licence fee

Poskytovatel licence na výsledek nepožaduje licenční poplatek

www

http://www.fit.vutbr.cz/~igregr/prods.php?id=494

Documents

nat.tar