Network Instruments GigaStor 114ff Bedienungsanleitung PDF herunterladen (Seite 100)

Forensic Analysis Profile field descriptions

Chapter 6 Forensic Analysis using Snort

100

rev. 1

right-click menu. You can also jump to the Decode display of the

packet that triggered the alert.

Forensic Analysis Profile field descriptions

This section describes in detail the fields on the Settings and Rules tab.

See:

Q “Forensic Analysis Profile Settings tab” on page 100

Q “Rules tab” on page 106

Forensic Analysis Profile Settings tab

Figure 72 Forensic Analysis Profile Settings tab

Table 8 describes the fields in the Forensic Analysis Profile Settings

tab.

1 2 ... 95 96 97 98 99 100 101 102 103 104 105 ... 145 146

GIGASTOR 1
GigaStor User Guide 3
Trademark Notices 4
Limited Warranty—Hardware 4
Limited Warranty—Software 5
Liability 5
Ownership and Confidentiality 6
Technical Support 7
Contents 9
About the GigaStor 13
GigaStor versions 14
Chapter 1 About the GigaStor 15
Installing Your GigaStor 17
Probe administration 24
GigaStor Capture Analysis 29
Digital T1/E1 Probe Settings 35
Serial T1/E1 Probe Settings 36
Q “Gigabit copper” on page 40 37
Q Optical TAP 37
10/100/1000 39
NIC for TCP/IP 39
Gigabit copper 40
Tapping a WAN connection 42
Router (DCE)CSU/DSU (DTE) 45
GigaStor or 45
Serial T1/E1 TAP 45
Observer Console 45
Figure 29 DS3/E3 TAP 47
Serial/HSSI 48
Figure 30 WAN HSSI 49
Drive ID sticker 51
GigaStor (8 drive) 51
GigaStor (16 drive) 51
1 2 3 4 52
GigaStor Control Panel 57
Display Controls 59
Right-click menus 60
Analyze button 61
GigaStor Options tab 64
Table 5 GigaStor Options tab 65
GigaStor Chart tab 67
GigaStor Outline 67
Figure 41 GigaStor Outline 68
Capture Graph tab 69
GigaStor Schedule tab 70
Statistics Lists tab 71
GigaStor reports 75
Discover Network Names 80
WAN Bandwidth Utilization 82
WAN Vital Signs by DLCI 83
WAN Load by DLCI 84
WAN Top Talkers 86
WAN Filtering 87
Triggers and Alarms 88
Figure 62 Triggers tab 89
Forensic Analysis using Snort 91
About Forensic Analysis tab 98
Q “Rules tab” on page 106 100
Rules tab 106
Observer on the GigaStor 107
Probe Instances 111
What is a probe instance? 112
Chapter 8 Probe Instances 114
Gen2 Capture Card 115
Chapter 9 Gen2 Capture Card 116
TCP/IP ports, NAT, and VPN 123
TCP/IP ports 124
Expansion Unit Cases 127
GigaStor 128
GigaStor Expandable 129
Expansion unit 130
Serial ATA Disk Interface 131
Power Supply 131
GigaStor Portable 133
Appendix C GigaStor Portable 134
Running Observer passively 136
Numerics 139
Legend: ff=Figure, t=Table 140

Kommentare zu diesen Handbüchern

Keine Kommentare

Network Instruments GigaStor 114ff Bedienungsanleitung Seite 100

Kommentare zu diesen Handbüchern