Free Essay

Network Analysis Tool

In:

Submitted By jhostile
Words 639
Pages 3
Recommendation for Network Analysis Tool Due to the increased budget of Digifirm I was asked to research and review some network traffic analysis tools and sniffers that could use in future investigations. There are several pieces of software available to fit out needs. I looked at many sniffers and network analysis tolls. Some of the programs I have researched are TCDump, Windump, Wireshark, HTTPSniffer, Nmap and Snort. A common tool used to intercept and log traffic over a digital network is TCpdump for UNIX platforms and Windump for windows computers. They both extract network packets and perform a statistical analysis on the dumped information. They can be used to measure response time and the percentage of packets lost, and TCP/UDP connection start up and end. TCPdump and Windump are not very user friendly sniffers. Wireshark is a packet sniffer that is used a lot. I even have it on my home computer. It is free download and is available for many operating systems. It is simple to use and the user will select an interface, or network card and then start the process. You can see the address where the packets are coming from or where they are going to. You can also protocol, timing and other important information. You can also stop the packet capture process and view individual packets. When you click on any given packet it displays the details of that particular packet. The information is color coded and sometimes you can even see the data in packet. Wireshark is affordable and easy to use. HTTPSniffer is much like Wireshark. It is easy to use and you can download a free trial version. It specifically use to capture web traffic. This sniffer will show all the HTTP commands going to the server and responses from that server. You must understand the basic HTTP commands as well as the response codes to interpret the data. Nmap is command line tool with a windows interface and is available for free. The tool is popular with hackers because it can be configured to operate rather stealthy and can be used to determine what ports are open on a machine, or for all computers in an entire range of IP addresses. Security administrators like the software because it will allow them to discover open ports on a network and could indicate spyware a back door and they can take the steps to protect them. Sometimes the administrator’s best tool is the one the hackers uses as well. Snort is a free network intrusion detection systems. SNORT can perform traffic analysis in real time. Snort can perform protocol analysis, search and match content. This program can be used to detect probes or attacks, such as port scans and buffer overflows. SNORT can be used as either a sniffer, packet logger or a network intrusion detection systems. While in sniffer mode the program will read network packets and display them. In packet logger mode, the program will logged the data on to the disk. And while in intrusion detection mode the program will monitor traffic and compare it against rules defined by the user. After researching and using all the programs, I recommend SNORT. It can do the job of a sniffer and an analysis tool itself. The software is free to but it is recommended you subscribe to be the first to get up dates. The software has with stood the test of time. In 2009 SNORT entered InfoWorld’s open source hall of fame as one of the greatest pieces of open source software in the world. I also recommend Wireshark. Wireshark is easy to use packet analyzer that free.

References
"Snort.Org." Snort.Org. N.p., n.d. Web. 07 Oct. 2014. (Eastom, 2014)
"Download." Wireshark • Go Deep. N.p., n.d. Web. 07 Oct. 2014.
(Eastom, 2014)

Similar Documents

Premium Essay

Social Network Analysis

...International Conference on Intelligent System Design and Engineering Application 2012 International Conference on Intelligent Systems Design and Engineering Application A Social Network Analysis Platform for Organizational Risk Analysis - ORA Yin Qiuju, Chen Qingqing School of Management and Economics, Beijing Institute of Technology, 100081 c_yinqj@163.com Abstract—ORA(Organizational Risk Analyzer) is a dynamic network evaluation and analysis tools which developed by the center for Computational Analysis of Social and Organizational System(CASOS), Carnegie Mellon University. It can track the relevant index of the group, identify the style of location and contrast the relation among networks, groups and individuals from the perspective of dynamic network. ORA also can recognize the key members, groups and vulnerabilities of the network between different time points, basing on which, carry on the further analysis. Compare with other social network analysis platform, ORA can support multiple data input form, and can instantly show the dynamic change of the network. This paper introduces the structure and functions of ORA, moreover, uses it to analyze the structure of a terrorist network, in order to find out the weakness of the organization. problems and to take advantage of network strengths. According to different contexts and types of the data, need to detailed test and determined. ORA can be used to do a risk audit for the organization of its individual...

Words: 2827 - Pages: 12

Premium Essay

Personal Social Media Audit

...Wechat, instagram, whatsapp and weibo. During 7 days period of recording, I discover that every morning after I wake up, I will spend some time on bed to go some social micro blog and network on the bed and the duration usually less that 30minutes. After that, I will use some mobile social apps like chatting tools such wechat, whatsapp during the day when I am free. The frequency that I use chatting tools actually is 24/7 standby, I will try to reply ASAP if I am still awake and not busy at that time, so the duration of use the chatting tools is short but frequency is high. When I look at the table, I was quite surprise, I find out actually I am quite addicted to the social networks. Since everyday I will check the social network media at least one time. I think this is because I want to catch up and knows what is going on in my friend circle. Such as Facebook, it was a good web that can look on others updates of statuses, photos, videos and profiles. It was an easy way and convenient way to interact and get connection with your friend circle. The microblog like weibo I found out that I use that a lot, it’s was a famous social microblogs in china just like twitter. It provides me a easy access to read and share articles, and communications with other users. For the chatting tools such as whatsapp and wechat, I use it very often to keep connection with my friend and family. It was convenience and you can contact people over the worldwide and its free-charge. Now, I don’t...

Words: 1507 - Pages: 7

Premium Essay

Business

...The Right to Privacy Ramon Rubalcava Redlands University Abstract [The abstract should be one paragraph of between 150 and 250 words. It is not indented. Section titles, such as the word Abstract above, are not considered headings so they don’t use bold heading format. Instead, use the Section Title style. This style automatically starts your section on a new page, so you don’t have to add page breaks. Note that all of the styles for this template are available on the Home tab of the ribbon, in the Styles gallery.] Keywords: [Click here to add keywords.] The Right to Privacy In this new generation the right to privacy is getting lower by the minute due to all of the social media and new electronic devices being invented daily. The right to privacy should not even be a question everyone should have the right to privacy to a certain extent. The right to privacy is a recent creation of little consequence other than cultural custom. The right to privacy is a big part if not the biggest part of everyone’s freedom because if anyone can come into anyone’s house at any given time or listen to all their calls and read all their text people will feel unsafe and without any freedom; It will feel like a prions where everything is being monitor. Everyone likes their privacy even if they do not have anything to hide just knowing that whatever they do or where ever they go will be only known to them and those they chose to share it with making them feel in control of their life...

Words: 1256 - Pages: 6

Premium Essay

Comparison of Social Media Tools

...Comparison of Social Network Analysis Tools What is Social Network :? Social network is a social structure made up of many actors, for example firms, or people which are all tied up in relationships, connections, or interactions(1). The social network perspective is made up to employ the structure of a social group, how they interact with each other, how this structure has an influence on other variables and how it changes as time passes. What is Social Networking Analysis? Social network analysis is the mapping and measuring of all the factors that make up the social network, it is the measuring of relationships and flows between people, groups, organizations, computers, URL, and other connected information entries(3). The nodes in the network are represented as people and the links show their direct relationships with each other. To have deeper understanding of networks and their participants , we evaluate the location of actors in the network which basically means finding the centrality of a node . These measures give us insight into the various roles and groupings in a network -- who are the connectors, mavens, leaders, bridges, isolates, where are the clusters and who is in them, who is in the core of the network, and who is on the periphery? In order to evaluate and understand these networks and the relationships between their actors we use social network analysis tools. We will be discussing three different SNA tools, compare between them, talk about their...

Words: 1454 - Pages: 6

Free Essay

Sniffer

...May-Jun 2012, pp.854-856 Network Traffic Analysis Using Packet Sniffer Pallavi Asrodia*, Hemlata Patel** *(Computer Science, dept., Jawaharlal Institute of Technology, Borawan, Khargone (M.P.) India.) ** (Computer Science, dept., Jawaharlal Institute of Technology, Borawan, Khargone (M.P.) India) ABSTRACT In the past five decades computer networks have kept up growing in size, complexity and, overall, in the number of its users as well as being in a permanent evolution. Hence the amount of network traffic flowing over their nodes has increased drastically. With the development and popularization of network Technology, the management, maintenance and monitoring of network is Important to keep the network smooth and improve Economic efficiency. For this purpose packet sniffer is used. Packet sniffing is important in network monitoring to troubleshoot and to log network. Packet sniffers are useful for analyzing network traffic over wired or wireless networks. This paper focuses on the basics of packet sniffer; it’s working Principle which used for analysis Network traffic. Keywords- Packet capture, Traffic analysis, Libpcap, Network Monitoring, NIC, Promiscuous mode, Berkeley Packet Filter, Network analyzer, Packet sniffer. unresponsive to those packets do not belong to themselves by just ignoring. However, if the network interface of a machine is in promiscuous mode, the NIC of this machine can take over all packets and a frame it receives on network, namely this machine (involving...

Words: 2215 - Pages: 9

Free Essay

Report

...SOFTWARE REQUIREMENT SPECIFICATION NET VIGILANT NETWORK MONITOR V1.1 Printed On: 3rd Dec 2007 C:\Washington University\ProjectDocument2.doc Department Of Computer Science & Engineering Washington University in Saint Louis Submitted By Subharthi Paul Madhuri Kulkarni Table of Contents |1 |INTRODUCTION |3 | |1.1 |Abstract____________________________________________________________ |4 | |1.2 |Introduction_________________________________________________________ |5 | |1.3 |Product Overview____________________________________________________ |6 | | | | | |2 |SPECIFIC REQUIREMENTS |8 | |2.1 |External Interface Requirements_________________________________________ |9 | | |2.1.1 User Interfaces_________________________________________________ ...

Words: 1548 - Pages: 7

Free Essay

Teleres Lte Planning Optimisation 2012 November

...LTE Radio Network Planning Theoretical and tools training course on LTE radio network planning and optimisation TeleResources Engineering (Aust) Pty Limited A.B.N. 48 093 413 604 website: www.teleres.com.au Unit2a 4-6 Aquatic Drive Frenchs Forest • PO Box 693 Brookvale NSW 2100 Australia Tel: +61 2 9975 2230 Fax: +61 2 9975 2240 Associates in Berlin, Boston, Budapest, Helsinki, Hong Kong, Kiev, London, Manila, New Zealand, Paris, Ottawa, Singapore, Seoul, Tokyo and Washington Introduction The mobile broadband industry in Australia has grown at a phenomenal rate in recent years. Data demand is constantly growing and the availability of new technologies such as HSPA and LTE are escalating the use of mobile broadband. This is being facilitated by innovations such as the Smartphone and tablets, which are stressing the ability of the operators to support the required bandwidth. Radio network engineers are faced with the challenges that come with a rapid change in technology. A new radio interface such as Long Term Evolution requires a different set of competencies and new tools that are designed to face the challenges of mobile broadband growth and efficient network utilization. TeleResources is one of the few independent Australian engineering companies focused on this sector. We are the exclusive distributor of Atoll™, the radio planning tool used by large operators such as Telstra and VHA. Our engineers have been involved in the design of the latest 3G networks as well as...

Words: 1530 - Pages: 7

Premium Essay

Info Security Lab 4

...packet capture and analysis. Which tool is preferred for each task, and why? While both Wireshark and NetWitness Investigator can be used to capture network traffic, the freeware version of NetWitness Investigator has a limitation of 1G of protocol capture per session. Wireshark does not have a limitation on the size of the capture file, which makes it better suited to protocol capture. Wireshark can be used to analyze capture files, but NetWitness Investigator is a seven-layer protocol analyzer that provides detailed protocol analysis and protocol behavior analysis and is much more user-friendly in terms of understanding protocol behavior and protocol analysis. 2. What is the significance of the TCP three-way handshake for applications that utilize TCP as transport protocol? A three-way handshake (SYN > SYN-ACK > ACK) is performed between the IP source and IP destination to establish a connection-oriented connection. 3. How many different source IP host address did you capture in your protocol capture? 8 including 0.0.0.0, otherwise 7 4. How many different protocols did your protocol capture session have? What function in Wireshark provides you with a breakdown of the different protocol types on the LAN segment? There were 10 protocols that the protocol capture session have. Click on: Statistics → Protocol Hierarchy In order to see the breakdown of the different protocol types on the LAN segment. 5. How and where can you find Wireshark network traffic packet size...

Words: 625 - Pages: 3

Premium Essay

Network Requirements Analysis

...Designing a new network from the ground up requires the input from many stakeholders of the project. Failure to follow a standard requirements analysis model often leads to network architectures and design that are outside of the scope of the project. For example, the resulting network may not be what the users expected, it may not support applications envisioned, and the technology the design is based on may not support certain devices. Failure to communicate during the requirements analysis process can end up with a network designer doing whatever he/she/ or they feel comfortable with. What the resulting product may become is a network based on proprietary technology of a single vendor, making the network difficult to expand or upgrade in the future. In this paper, the requirements analysis sections will be thoroughly discussed as they apply to the network design process, and how following each one to its completion improves the entire process. In addition, the specific tools for determining performance requirements and the importance of stakeholder input will also be addressed. It is often the case that strict timelines and budgetary concerns result in shortcuts to the requirements analysis process, shortcuts that can become expensive headaches down the road. The process of analyzing requirements is composed of five sections that include gathering and listing requirements, developing service matrices, characterizing behavior, developing requirements, and mapping these requirements...

Words: 1017 - Pages: 5

Free Essay

Vulnerability Asses Vulnerability Assessment System Penetration and Analysis Testingsment System Penetration and Analysis Testing

...Penetration and Analysis Testing | |Memo | Internal Penetration Testing Tool and Purchase | | | | With the recent attack/hack on agency's network town police department authorities came to a decision to conduct a complete assessment on network vulnerabilities. The main goal of this memo is to assess or evaluate the network penetration tools available in the market. Compare the tools. Cost to buy and implement these tools internally. Hire a professional service to evaluate these tools. In this memo we will cover the internal implementation at high level. In the market there are many penetration tools like a. Nmap - Worlds Best Port Scanner b. Nessus - Vulnerability Scanner c. Metasploit - Exploit framework For testing Vulnerabilities I picked the above three mentioned tools which are widely used in many organizations and would be perfect for this scenario. The penetration tools that could be used to conduct a vulnerability analysis are; Nmap and Nessus which provide a number of penetration testing techniques such as port scanning, Credentialed and uncredentialed scans, enumeration, patch, configuration network mapping, and...

Words: 1156 - Pages: 5

Premium Essay

Nt1310 Unit 3 Assignment 3

...Wireshark Wireshark, a network analysis tool formerly known as Ethereal, collects packets in real time and display them in human-readable format. Wireshark includes filters, color-coding and numerous other features that allows deep analysis of network traffic and scrutinizes specific packets. It is used for networking troubleshooting, Malware analysis and education purposes. NMAP Nmap ("Network Mapper") is a Free Security Scanner for Network Exploration and Hacking. It is utilised to scan a network and collects data about the target network. It reports on open ports, Services running in the host, OS information and packet filters and firewall information. John the Ripper John the Ripper (JTR) is free and fast password cracker. Its main purpose is to detect susceptible UNIX passwords. It is one of the most widespread password...

Words: 541 - Pages: 3

Free Essay

Analysis 4.1

...NT1230 GARRETT FOGLE ANALYSIS 4.1 Mr. Dakrouni Server Analysis When designing a new network for a soil analysis company, many things must be planned in regards to servers and their roles. The information that I have done my planning on says that the employees of the company will be doing soil analysis and mapping the information to a Geographical Information System (GIS) database. The President and vice President want their employees to be able to get email, be able to get shared files, and print to common printer. With this information, I have analyzed their requirements for amount of servers needed, roles to assign to each, and some of the tools required to configure them. To start off, they will need 8 servers to efficiently run their business with 2 being redundant to be available to pick up the workload if one fails. The six main servers will be assigned roles as follows; file services, database server, application server, monitoring server, threat management server, and print services. The file services server allows you to centrally locate files to be accessed by multiple people, making them easier to access, find, and backup. This server will be important to the employees for sharing of data and references to past work. The database server would serve as a storage...

Words: 692 - Pages: 3

Free Essay

Personal Learning Paper

...starting L1 FM tracker in Fault management process improving the performance of Network. Ø Starting a new report NPR (Network performance report) for analyzing the network so that network performance could be improved. Ø Taking initiatives in giving demos to customers about the Huawei Tools. Responsibilities included: Ø Currently working with Huawei Telecommunications India Pvt.Ltd. as a Configuration fault Management Engineer (front office). In Managed Services Department Ø Started 3G monitoring patterns & fault management process for both TATA & Airtel. Ø Undertaking 3G Traning network: · WCDMA principles · Hardware knowledge of Huawei RNC & BTS products. · 3G architecture & interfaces. · 3G protocols & protocol stack. Ø Participated in a shift pattern for monitoring 24x7 using the Huawei Monitoring tools Like EMS tools (M2000 for NSS and BSS). Ø Monitoring of alarms gets Supports through Trouble Ticket management with the NMS TT-Tools like MOS 5100 and MOS 7100. Ø Worked as shift lead for TATA GSM. Ø Working as shift lead for Alarm surveillance team(Airtel GSM). Ø Handled generation & analysis of various daily reports. Such as: Outage Reports, Quality Reports and CDR Reports. Ø Get Training for Rehoming of BTS from one BSC to other BSC as required. Ø Performance of tasks as requested by the NOC Manager, and reporting accordingly. Ø Knowledge of HUAWEI products and Tools. Skills: Courses studied|Analog & digital electronics, TV, wireless, Communication...

Words: 599 - Pages: 3

Premium Essay

Requirements Analysis Paper

...Requirements Analysis Paper Justin Morris NTC/415 September 7, 2015 Mark Baker Requirements Analysis Paper “Requirements analysis, also called requirements engineering, is the process of determining user expectations for a new or modified product” (Rouse, 2007). Requirements analysis is a type of project management that takes place with IT (Information Technology) professionals that are redesigning or designing a new network. The requirements analysis has two different documents. “The combination of all the requirements and locations is expressed in two documents: a requirements specification and a requirements map” (Axia College, 2015, Week Three Reading). Required Sections for Requirements Analysis The requirements analysis has three major sections that are required. These three sections are: gather and list requirements, develop service metrics, and characterize behavior. These three sections are then analyzed to become two required sections that are develop and map requirements. The first section of the requirements analysis (gather and list requirements) has five sub-sections that make it up. These five sub-sections are: user, application, device, network and other requirements. The user requirements is broken into several different general requirements that need to be covered for the user requirements. According to Axia College Week Three Reading (2015), these general requirements are: timeliness, interactivity, reliability, presentation quality, adaptability...

Words: 1323 - Pages: 6

Premium Essay

Data Mining

...1. Define data mining. Why are there many different names and definitions for data mining? Data mining is the process through which previously unknown patterns in data were discovered. Another definition would be “a process that uses statistical, mathematical, artificial intelligence, and machine learning techniques to extract and identify useful information and subsequent knowledge from large databases.” This includes most types of automated data analysis. A third definition: Data mining is the process of finding mathematical patterns from (usually) large sets of data; these can be rules, affinities, correlations, trends, or prediction models. Data mining has many definitions because it’s been stretched beyond those limits by some software vendors to include most forms of data analysis in order to increase sales using the popularity of data mining. What recent factors have increased the popularity of data mining? Following are some of most pronounced reasons: * More intense competition at the global scale driven by customers’ ever-changing needs and wants in an increasingly saturated marketplace. * General recognition of the untapped value hidden in large data sources. * Consolidation and integration of database records, which enables a single view of customers, vendors, transactions, etc. * Consolidation of databases and other data repositories into a single location in the form of a data warehouse. * The exponential increase...

Words: 4581 - Pages: 19