Network Security Consulting Agency Since 1989 - Specialized in Unix, Windows, TCP/IP and Internet
Text mode: access to the page content
Hervé Schauer Consultants
You are here: Home > Resources > Lectures > Network Flows based forensics of a honeypot
Go to: HSC Trainings
Version française
o Skills & Expertise
o Consulting
o ISO 27001 services
o Vulnerabilities monitoring
o Audit & Assessment
o Penetration tests
o Vunerability assessment (TSAR)
o Forensics
o Training courses
o E-learning
o Agenda
o Past events
o Tutorials
o Thematic index
o Tips
o Lectures
o Courses
o Articles
o Tools (download)
o Vulnerability watch
o Hervé Schauer
o Team
o Job opportunities
o Credentials
o History
o Partnerships
o Associations
   Press and
o HSC Newsletter
o Press review
o Press releases
o Publications
o How to reach us
o Specific inquiries
o Directions to our office
o Hotels near our office
|>|Network Flows based forensics of a honeypot  
> Access to the content HTML Beginning of the presentation
PDF PDF version [209 KB]  
> Description This talk gives an overview of network flows, tools and methods, as used for network forensics of a honeypot.  
> Context & Dates Talk made during the SUR / OSSIR meeting, on 9 March 2004.
> Author Yann Berthier 
> Type [ French - HTML ]  
> Abstract &
Table of content
Flux réseau
Autopsie d'une trace réseau
24 heures de la vie d'un pot de miel
Il y a des paquets sur Internet ...
Début des hostilités
Où le port 45295 semble mis à profit
Premiers flux émis
Plus on est de fous ...
O surprise - de l'IRC !
Les kiddies ont faim
> Related documents
[Presentation]  Intrusion detection and network forensic [6 May 2004 - French]
[Presentation]  Ethereal, a multi-purpose network analyzer - how to detect viruses and worms with network analysis [4 May 2004 - French]
[Techno-watch]  CanSecWest 2002 Conference [4 May 2002 - French]
[Presentation]  Honeypots [12 March 2002 - French]
> Copyright © 2004, Hervé Schauer Consultants, all rights reserved.


Last modified on 20 April 2004 at 13:41:01 CET - webmaster@hsc.fr
Information on this server - © 1989-2010 Hervé Schauer Consultants