【Hinemos6.1】Introduction to the Packet Capture Monitor

This article will explain to you about the Packet Capture Monitor, a new monitoring feature introduced from Hinemos ver.6.1.

<Prerequesties>
①Hinemos Agent must be installed and running on the target node
②libpcap/WinPcap must be installed

<The Process Flow of Packet Capture Monitor>
①Hinemos Agent will retrieve the packet sent/received from the network card
②Output the packet as dump file when the specified amount has been retrieved (*1)
③Perform a monitor to the output dump file

*1 The number of packets and the output directory of the dump file are decided according to the configuration of Hinemos Agent

The collected network packets can be accumulated in the internal database, and these data can be analyzed using tools such as Wireshark.

By collecting/monitoring network packets, Hinemos can detect that specified amount of data has been transferred between certain addresses.

<Example>
Send an alert when the amount of data transferred between 191.168.56.101(Node Name:os1-var6-1) and 192.168.56.105 has reached a specific value.

<Setting>
・Scope:os1-var6-1
・Filter(Specify the target range of the packet according to the BPF rule):host 192.168.56.105
・Judgment(Search for specific keyword included in the collected packet):.*→Critical

 

Transfer data between 191.168.56.101 and 192.168.56.105

<Result>
Hinemos has detected the dump file including the packet transferred between 191.168.56.101 and 192.168.56.105 output from Hinemos Agent.

 

By changing the filter setting, you can select various range data to retrieve from the packet.
You can also customize the judgment setting to let Hinemos notify you when a specified character string is included in the retrieved packet.

That’s it for the introduction to the Packet Capture Monitor.

 

Thank you for reading!

 

Hinemos Subscription

If you are interested in using Hinemos in the enterprise environment, visit our online store Hinemos Store for information regarding our subscription packages of Hinemos. Various types of subscription are available with additional option features, support, etc., for enhancing the operation of Hinemos.

<

form>Go to Hinemos Store!

Note: Currently, our subscription is available only to customers located in the United States.

 

Follow our SNS accounts for updates and more!

twitter facebook linkedin instagram

Leave a Reply

You must be logged in to post a comment.