Software

Question 1

Protocol analyzer/packet capture

Answer 1

Utility that can parse the header fields and payloads of protocols in captured frames for display and analysis. Example: Wireshark

Question 2

IDS/NIDS

Answer 2

Security appliance or software that uses passive hardware sensors to monitor traffic on a specific segment of the network.

Question 3

Flow data analyzer

Answer 3

Monitoring information about network traffic flows (network communication flows summarized by host or protocol type). Example: NetFlow

Question 4

IPS/NIPS

Answer 4

Security appliance or software that combines detection capabilities with the functions that can actively block attacks.