...
PureInsight allows the user to easily discover potentially malicious IP nodes even if they are not actively looking for it
PureInsight allows the user to “drill down” the malicious IP and determine the list of peers and protocols/ports used. This is designed to handle thousands of peers (tested to 400k) and protocols/ports.
PureInsight allows multiple PCAP sources to create a single output, this allows PureInsight to display data from multiple network perspectives, such as internal network, edge devices, and public domain devices.
Workflow:
| Table of Contents |
|---|
...
|
1. Interactive Search
Run Search. A grid graph appears when a search is being run.
Interactive Search can be used to categorize captured traffic data based on IP addresses, port numbers, protocols, and regular expressions. You can visualize the network traffic as a Nodal Graph with details of each node displayed.
...