|
|
Adaptive Sampling of Input Packets Implemented in FlowMon Probe
Kaštovský, Petr ; Martínek, Tomáš (referee) ; Kořenek, Jan (advisor)
There is a FlowMon probe being developed in a Libeouter project that is used for passive network measurements. The probe has better stability and accuracy than sofware based solutions even under a heavy load or network attack. To guarantee a precision of results there is a need to data reduction to prevent measuring system overload. There are few kinds of data reduction. Method used in the FlowMon probe is called sampling. Adaptive sampling unit sets the sampling rate (rate of processed and discarded packets) according to actual state of measured network.
|
|
|
Mitigation of Volumetric DDoS Attacks in SDN Environment
Hodes, Vojtěch ; Křepelka, Václav (referee) ; Škorpil, Vladislav (advisor)
The aim of this Master's thesis is to explore different attitudes and to design various monitoring and detection concepts of volumetric DDoS attacks in core networks. The thesis deals with data flow control protocols with an emphasis on a modern technology of Software Defined Networks. The last part of the thesis describes verification of the theory by setting up a laboratory environment for volumetric DDoS UDP Flood simulation, detection and automated mitigation.
|
|
|
Self Test of FlowMon Probe
Ivančo, Daniel ; Kořenek, Jan (referee) ; Kaštil, Jan (advisor)
Aim of this bachelor thesis is to design and implement self test of FlowMon probe. Which is a device monitoring network traffic based on IP flows, developed by Liberouter project team. The thesis includes theories of testing and test categories the self test is related to. There is also a brief description of network monitoring by NetFlow protocol and description of FlowMon probe architecture. Furthermore, the thesis contains the self test design and its description. Final solution consist of two programs. The first one implements packet generator creating all types of required packets and flows used by the second one, which implements the self test itself.
|
|
|
Extraction of Available Information from SSH Protocol Headers
Ďurčanský, Norbert ; Bartoš, Václav (referee) ; Kořenek, Jan (advisor)
This paper analyzes issue regarding to extraction of available information from SSH protocol. To achieve this aim, knowledge about SSH protocol were used to implement plugin for FlowMon exporter. During the testing plugin was tested on real network and validated in terms of stability, efficiency and accuracy. The result plugin allows us to extract information from SSH protocol and futher analysis without decryption of traffic.
|
|
|
Porting Netflow/Combo6 Probe from Linux to FreeBSD
Grešša, Pavol ; Kašpárek, Tomáš (referee) ; Čejka, Rudolf (advisor)
The thesis deals with the problem of developing device drivers for FreeBSD operation system and explains particular steps necessary for their implementation. Furthermore, it describes modularity of drivers and basic technologies used in this operation system. Its purpose is to create a device driver for the principal card Combo6x of the Liberouter project. The output of the thesis should be a complete device driver supporting DMA transfers ant interrupts.
|
|
|
Radius Monitoring Using IPFIX
Vyskočil, Pavel ; Grégr, Matěj (referee) ; Matoušek, Petr (advisor)
This barchelor thesis is focused on monitoring RADIUS traffic in the computer network based on IPFIX technology. A new input plugin for the FlowMon probe from the INVEA-TECH company was created using the acquiered knowledge about the RADIUS traffic and the possibilities of the IPFIX protocol. During the tests, the implemented plugin showed the ability to detect and process RADIUS comunication in the LAN network.
|
|
|
Netopeer: Configuration Platform for Network Devices
Žižlavský, Marek ; Žádník, Martin (referee) ; Kořenek, Jan (advisor)
Master's thesis analyzes available network device configuration options and describes NETCONF configuration protocol and NETCONF event notifications extension in details. It describes Netopeer, open configuration platform developed on Liberouter project, and its pitote deployment as FlowMon probe remote configuration system. Newly designed Netopeer architecture, which adds support for NETCONF event notifications, was verified by reference implementation. Security of the new design and implementation was analyzed, and recommended system settings were provided. This Master's thesis is based on results of previous bachelor's thesis of author and on existing software tools developed by the Liberouter project.
|
|
|
Traffic Analysis of Network Protocols Kerberos, NTLM, and SAML 2.0
Krůl, Michal ; Orsák, Michal (referee) ; Tisovčík, Peter (advisor)
This thesis engages the problem consisting of analysis and detection of the attacks carried out on the authentication protocols in the environment of network structures, like those used in big corporations. In~this thesis, the problem is examined in the light of the netflow analysis. Main content of the thesis is a simulation of the attacks targeting network architectures, where the authentication is served by mentioned protocols, and effort to detect these attack by the netflow monitoring. The outcome of this thesis is a draft, how to automatically detect the attacks carried out in the network structures, and plugin for the exporter of the Flowmon sond, the product of Flowmon Networks company, which will be extracting the information needed for the performance of the detection.
|
|
|
Web Configuration Interface for Network Devices
Žižlavský, Marek ; Kořenek, Jan (referee) ; Martínek, Tomáš (advisor)
Main goal of this bachelor work is to design a universal configuration system for remote network device configuration based on the NETCONF protocol and to develop a web configuration interface for the FlowMon, monitoring probe. This work uses existing software tools developed by the Liberouter project. Main objective of the implementation part of this work is to develop a web configuration interface, supporting class libraries for configuration management and GUI creation in PHP. Implemented web configuration interface for the FlowMon probe is a fully-functional prototype of a configuration interface based on concepts of the universal configuration system designed in this bachelor work.
|
|
|
Quality Analysis of VoIP Calls
Basel, Martin ; Ryšavý, Ondřej (referee) ; Matoušek, Petr (advisor)
This bachelor's thesis focuses on methods for evaluating quality of VoIP calls. You can read about analysis of RTP/RTCP packets and use this knowledge for computing statistics required for assessing quality of VoIP calls. Also, I explain the method, which is implemented in plugins that work in FlowMon probe. Finally, you will see the results compared to the other programs.
|
guest ::
