Network Instruments GigaStor 114ff Uživatelský manuál stáhnout pdf (Strana 95)

Starting Forensic Analysis using Snort rules

Chapter 6 Forensic Analysis using Snort

rev. 1

Figure 66 GigaStor Analysis Options

3 Select the profile that you want or click Edit.

4 Click the Settings Profile Edit button to view and define the fields

as you need. The fields are described in full in “Forensic Analysis

Profile Settings tab” on page 100.

Figure 67 Forensic Settings

1 2 ... 90 91 92 93 94 95 96 97 98 99 100 ... 145 146

GIGASTOR 1
GigaStor User Guide 3
Trademark Notices 4
Limited Warranty—Hardware 4
Limited Warranty—Software 5
Liability 5
Ownership and Confidentiality 6
Technical Support 7
Contents 9
About the GigaStor 13
GigaStor versions 14
Chapter 1 About the GigaStor 15
Installing Your GigaStor 17
Probe administration 24
GigaStor Capture Analysis 29
Digital T1/E1 Probe Settings 35
Serial T1/E1 Probe Settings 36
Q “Gigabit copper” on page 40 37
Q Optical TAP 37
10/100/1000 39
NIC for TCP/IP 39
Gigabit copper 40
Tapping a WAN connection 42
Router (DCE)CSU/DSU (DTE) 45
GigaStor or 45
Serial T1/E1 TAP 45
Observer Console 45
Figure 29 DS3/E3 TAP 47
Serial/HSSI 48
Figure 30 WAN HSSI 49
Drive ID sticker 51
GigaStor (8 drive) 51
GigaStor (16 drive) 51
1 2 3 4 52
GigaStor Control Panel 57
Display Controls 59
Right-click menus 60
Analyze button 61
GigaStor Options tab 64
Table 5 GigaStor Options tab 65
GigaStor Chart tab 67
GigaStor Outline 67
Figure 41 GigaStor Outline 68
Capture Graph tab 69
GigaStor Schedule tab 70
Statistics Lists tab 71
GigaStor reports 75
Discover Network Names 80
WAN Bandwidth Utilization 82
WAN Vital Signs by DLCI 83
WAN Load by DLCI 84
WAN Top Talkers 86
WAN Filtering 87
Triggers and Alarms 88
Figure 62 Triggers tab 89
Forensic Analysis using Snort 91
About Forensic Analysis tab 98
Q “Rules tab” on page 106 100
Rules tab 106
Observer on the GigaStor 107
Probe Instances 111
What is a probe instance? 112
Chapter 8 Probe Instances 114
Gen2 Capture Card 115
Chapter 9 Gen2 Capture Card 116
TCP/IP ports, NAT, and VPN 123
TCP/IP ports 124
Expansion Unit Cases 127
GigaStor 128
GigaStor Expandable 129
Expansion unit 130
Serial ATA Disk Interface 131
Power Supply 131
GigaStor Portable 133
Appendix C GigaStor Portable 134
Running Observer passively 136
Numerics 139
Legend: ff=Figure, t=Table 140

Komentáře k této Příručce

Žádné komentáře

Network Instruments GigaStor 114ff Uživatelský manuál Strana 95

Komentáře k této Příručce