coral ocXmon monitors up to OC12 (OC48?)
persistent, real-time, full-frame traffic collection
dynamic packet filtering triggered by attack precursors
security policy
compliance auditing (passive)
enforcement (active)
must address privacy issues
https://www.caida.org/Tools/Coral
Previous slide
Next slide
Back to first slide
View graphic version