What is the capture of packets?

Packet capturing is simply the process of charge packet packets that travel via a computer network. When the packets are completely captured, only the auxiliary data contained in the packet header, such as the address information or the internet protocol format (IP) in the packet, is collected. In the case of deep packets (DPC), the entire packet is obtained, both the header information and the actual useful data load. The process is also often referred to as packet sniffing.

Which method of packet capturing can take place on any of the layers of open systems (OSI) above the layer, the physical layer, because the physical layer only works in the form of electrical signals. Packets are not captured until these currents and zeros are converted back to data packets, which can then be collected. Through a given network interface, it can only be collected for packets designed for the address of the interface, unless the interface is configured for what is called promiscuous mode. The network interface acting promiscut is withChopno to capture not only your own packets, but also for others.

6 The complete collection has no limits, so all packets passing through the interface are caught. However, when filtering packets, they are evaluated when they pass through the interface and only collect certain packets that meet specific criteria. This allows the administrator to save only the types of packets that are interested in or packets pointing to certain addresses. Filtered collections also save hardware sources and can be used to round packets that may be needed later to prove fault.

For capturing packets, there are many purposes from which it all revolves around the concept of a deep inspection of packets (DPI). Since packets are obtained, controlled and analyzed for many reasons, most of which include detection of disturbance, data security and integrity or network performance, even if there are some dangerous P collection purposesAke. As a result, when considering deep trapping and control of packets, there may be strong concerns about privacy.

6 Alternatively, they can be stored on the hard disk of the computer indefinitely. In the case of real -time analysis, packets can only be assessed on the basis of known security problems or concerns, while the collection in the warehouse can later be analyzed by specialists in forensic forensic to help determine when or how the safety disruption of security disturbance.

There are many packet scanning programs. Some network hardware manufacturers include ability on their devices such as built -in packet capture features in Internetwork (iOS), provided on Cisco Systems® hardware. However, the decline packets exist in many forms, from a simple collection to a more detailed analysis. Many of the most popular sniffe packets are open source projects such as WireShark and WinPCAP, which not only capture packets but also processThe tasks of the inspection and the analysis of packets also have ovaries. The often diverse community is updated to keep up with the latest security problems.