Cyberprobe is a distributed software architecture for monitoring of networks against attack. It consists of two components: cyberprobe, which collects data packets and forwards them over a network in standard streaming protocols; and cybermon which decodes protocols, and invokes user-defined logic on the decoded data.
Cyberprobe can be integrated with snort so that the captured data corresponds with an attackers IP address as detected by snort.
Cybermon uses a LUA configuration file to describe what to do with the decoded information, providing great flexibility. Cybermon also supports a couple of packet injection techniques, allowing you to respond to attacks by resetting connections, or forging DNS responses.
- The cyberprobe componentcollects data packets and forwards over a network in standard streaming protocols.
- Cyberprobe can be integrated with Snort so that network attack attempts are used to trigger data collection.
- Cyberprobe has a dynamic tasking interface to allow integration with other software.
- Cybermon components provides protocol decoding for real-time analysis purposes.
- Cybermon uses a rich LUA configuration file to allow the user a great deal of control over what happens with the decoded information.
- Cybermon incorporates two packet injection techniques to allow you to fight back.
Be the first to post a review of Cyber Probe!