sampling packet – Lechuck Park

Protect A Network ( Easy to approach ) – I

Posted on 2023-02-21 by lechuck park

sflow(Sampling Packet)

Posted on 2022-10-022022-10-02 by lechuck park

Netflow (Sampling Packet)

Posted on 2022-09-292022-09-29 by lechuck park

Network Monitoring Solution

Posted on 2022-04-242022-06-29 by lechuck park

One more.
From an Analysis of [Sampling Packet data], You can collect a [Selected Raw Packet Data] by an IP Flow control.
And then, DO an analysis of [Selected Raw Packet Data].
ex) if you found a packet [ destination port 22 to unknown destination IP address], You would wanna check all packets from [ unknown IP address] which my IP connected to SSH(22 port).