VisualSniffer

[lynchknot]

What do you guys think of this product? I'm not sure what it is, a firewall? http://www.biovisualtech.com/

Overview

VisualSniffer is a powerful packet capture tool and network intrusion detection system for Windows system. VisualSniffer can be used by LAN administrators, and security professionals for network fault analysis, performance analysis, intrusion detection, and network traffic logging.It can also be used by network programmers, or others to get a full picture of the network traffic.

VisualSniffer can perform protocol analysis, content searching/matching based on user defined rules in real-time and notify users by e-mail, sound, and text message when intrusion is detected. VisualSniffer provides hundreds of built-in rules for detecting a variety of attacks and probes, such as buffer overflows, port scans, CGI attacks, OS fingerprinting attempts, and much more. VisualSniffer provides graphical and statistical displays with colored charts and decodes TCP, UDP and ICMP packets down to the lowest layer. IP packets are organized based on their source and destination addresses and TCP/IP packets are further grouped into connections. The users can also define workspaces to view special groups of packets.

[lynchknot]

apparently not.

[nick s]

Not a firewall. It captures network traffic much like Ethereal or CommView. Like CommView, it does have intrusion detection features (alarms, etc), but it does not stop network traffic based on what it detects.

Nick

[lynchknot]

thanks nick