Hi KC,
Agreed, they are all great products but I'm looking for products that can
capture every packet on huge pipes, analyse those packets, store them
locally allow them to be viewed remotely or even store remotely. Present
the data in the manner they were intended, extract meta data. Ideally apply
priorities over which streams should be kept the longest etc etc. I know I
should have been more specific in my original post. Hindsight is a
wonderful thing. I based the criteria around Greg Shipley's review on such
products.
Regards
-andy cuff
The Talisker Network Security Portal
http://securitywizardry.com
Computer Network Defence Ltd
-----Original Message-----
From: KC Ferguson [mailto:4g-forensics@5834.net]
Sent: 30 November 2004 04:01
To: forensics@securityfocus.com
Subject: Re: Network Forensic Suites
<quote who="Andy Cuff">
Hello,
I'm currently extending the portal to include network forensic suites, ie
products that can collect, store and present network traffic. I'd be very
interested in hearing any views of list members regarding the definition
of
the category and also whether I'm missing any of the products within this
sector?
The page is at http://securitywizardry.com/fornettools.htm
Products I have so far are:
NetDetector
InfiniStream
NetIntercept
eTrust
Snort IDS - http://www.snort.org/
Kismet - http://www.kismetwireless.net/
Ethereal - http://www.ethereal.com/
tcpdump - http://www.tcpdump.org/
... and these are all FREE, not commercial.
--
Regards
KC Ferguson CIO/CTO
@RescuNET.com
eXtreme Response Mobile HotSpot
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.804 / Virus Database: 546 - Release Date: 30/11/2004
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.804 / Virus Database: 546 - Release Date: 30/11/2004
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
