Iris

A: Network traffic analyzing is the process of monitoring both incoming and outgoing traffic on an organization’s network by capturing and retracing the steps of any network user

A: Iris reconstructs every keystroke that goes in or out of your network and thoroughly examines the critical information in order to obtain a precise picture of the activity occurring on the network in a format that is easy to understand.

A: Iris utilizes and integrates the following advanced features and functionalities: Packet reconstruction Packet manipulation/forging Filter by Protocol Layer, keywords, MAC and IP address, TCP/UDP port, packets size and custom data Log network-wide foreign connection attempts Reconstruction of common TCP protocols (reconstructs emails, web pages) Log “sniffed” packets Log reconstructed packets

A: Unlike other network analyzers, Iris has advanced, integrated technology that allows it to reconstruct network traffic in a format that is simple to use and understand with a push of a button. There is no other network analyzer that can show you the web page your employee is watching during work hours.

A: Any organization that has a network should possess some type of traffic analyzer. Iris makes it simple enough so that even a non- technical employee such as a CEO can analyze the network traffic. Iris can, on the same token, be detailed and specific enough to satisfy the most meticulous Network Security Administrator.

A: Decode is the module which reconstructs captured traffic transforming hundreds of hard to read binary packets into meaningful information showing you the emails, web pages, ICQ sessions, etc traveling on the wire. Iris can create and send custom packets too. Just pick the packet of your choice, modify its data and send it back to the wire.

A: Guard can watch over your office and alarm you when someone from the outside (or inside) tries to connect to your computers. Guard displays the date and time of the connection attempt, the victim and intruder IP addresses and DNS names and the port on which the connection attempt has been seen.

A: Ensure you are logged in with Administrative rights

A: Iris can be run on a scheduled basis by using the task scheduler in Windows. As an example to start Iris at 2:27 P.M. issue the following command:

C:\>at 14:27 /interactive "C:\Program files\Iris\iris.exe" /

autostart Iris will start and will go directly into the systray and will start capturing (this being the effect of the /autostart command)

A: Yes Iris can read logs generated from other network monitors as long as they are uncompressed.