Accession Number:

AD1089824

Title:

Network Traffic Analysis with SiLK: Analyst's Handbook for SiLK Version 3.15.0 and Later

Descriptive Note:

Technical Report

Corporate Author:

CARNEGIE-MELLON UNIV PITTSBURGH PA PITTSBURGH United States

Personal Author(s):

• Krystosek,Paul
• Ott,Nancy
• Sanders,Geoffrey
• Shimeall,Timothy

Report Date:

2019-06-01

Pagination or Media Count:

334.0

Abstract:

This course introduces you to network flow analysis using the CERT open source SiLK tool suite. Network flow analysis enables retrospective analysis of a networks traffic to help with forensic analysis, passive network profiling, and threat discovery. Network flow analysis benefits from the very long retention of flow data due to the extremely small size of flow records, allowing examination of traffic going back much further in time than is possible with analysis of full-packet capture. Network flow analysis also helps you solve many privacy issues inherent in packet analysis. The SiLK tool suite is uniquely suited to analyzing extremely large networks with massive amounts of traffic.

Descriptors:

• network protocols
• computer programming
• internet
• computer network security
• programming languages
• shell scripts
• application protocols
• software development
• malware
• digital data
• data analysis
• electronic mail
• operating systems
• spreadsheet software
• computer networks
• transport protocols

Subject Categories:

• Cybernetics

Distribution Statement:

APPROVED FOR PUBLIC RELEASE