Network Instruments GigaStor 114ff Manual de usuario Pagina 98
- Pagina / 146
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Starting Forensic Analysis using Snort rules
Chapter 6 Forensic Analysis using Snort
98
rev. 1
10 Click OK to close the Forensic Analysis Profile dialog. Click OK
again to close the Forensic Settings dialog. Click OK to close the
GigaStor Analysis Options dialog.
Observer applies the rules and filters to the capture data and
displays the results in the Forensics Summary tab. A new tab is
also opened that contains the decode. For details about the tabs,
see:
Q “About Forensic Analysis tab” on page 98
Q “About the Forensic Analysis Log tab” on page 99
About Forensic Analysis tab
This display summarizes alerts and preprocessor events in a navigable
tree.
Figure 70 Forensic Summary
T
IP! PREPROCESSOR
MAXIMUMS
It is important to examine the preprocessor results to ensure
that time-outs and other maximum value exceeded conditions
haven’t compromised the analysis. In Figure 70, both the IP
Flow and TCP Stream Reassembly preprocessors have timed
out on hundreds of flows and streams. If you see similar
- GIGASTOR 1
- GigaStor User Guide 3
- Trademark Notices 4
- Limited Warranty—Hardware 4
- Limited Warranty—Software 5
- Liability 5
- Ownership and Confidentiality 6
- Technical Support 7
- Contents 9
- About the GigaStor 13
- GigaStor versions 14
- Chapter 1 About the GigaStor 15
- Installing Your GigaStor 17
- Probe administration 24
- GigaStor Capture Analysis 29
- Digital T1/E1 Probe Settings 35
- Serial T1/E1 Probe Settings 36
- Q “Gigabit copper” on page 40 37
- Q Optical TAP 37
- 10/100/1000 39
- NIC for TCP/IP 39
- Gigabit copper 40
- Tapping a WAN connection 42
- Router (DCE)CSU/DSU (DTE) 45
- GigaStor or 45
- Serial T1/E1 TAP 45
- Observer Console 45
- Figure 29 DS3/E3 TAP 47
- Serial/HSSI 48
- Figure 30 WAN HSSI 49
- Drive ID sticker 51
- GigaStor (8 drive) 51
- GigaStor (16 drive) 51
- 1 2 3 4 52
- GigaStor Control Panel 57
- Display Controls 59
- Right-click menus 60
- Analyze button 61
- GigaStor Options tab 64
- Table 5 GigaStor Options tab 65
- GigaStor Chart tab 67
- GigaStor Outline 67
- Figure 41 GigaStor Outline 68
- Capture Graph tab 69
- GigaStor Schedule tab 70
- Statistics Lists tab 71
- GigaStor reports 75
- Discover Network Names 80
- WAN Bandwidth Utilization 82
- WAN Vital Signs by DLCI 83
- WAN Load by DLCI 84
- WAN Top Talkers 86
- WAN Filtering 87
- Triggers and Alarms 88
- Figure 62 Triggers tab 89
- Forensic Analysis using Snort 91
- About Forensic Analysis tab 98
- Q “Rules tab” on page 106 100
- Rules tab 106
- Observer on the GigaStor 107
- Probe Instances 111
- What is a probe instance? 112
- Chapter 8 Probe Instances 114
- Gen2 Capture Card 115
- Chapter 9 Gen2 Capture Card 116
- TCP/IP ports, NAT, and VPN 123
- TCP/IP ports 124
- Expansion Unit Cases 127
- GigaStor 128
- GigaStor Expandable 129
- Expansion unit 130
- Serial ATA Disk Interface 131
- Power Supply 131
- GigaStor Portable 133
- Appendix C GigaStor Portable 134
- Running Observer passively 136
- Numerics 139
- Legend: ff=Figure, t=Table 140
Sencor Waffle irons user manuals
The list of Sencor Waffle irons products contains 1 user manuals for 1 models. All pdf user’s guides are available for download or viewing online.
Comentarios a estos manuales