PACKET CAPTURE AND NETWORK TRAFFIC REPLAY

摘要

Implementations disclosed herein provide a network agent embodied in firmware and/or software that replays network traffic of an enterprise network to an entity outside of the enterprise network. The network agent selects and processes the network traffic according to certain policies set by the enterprise network or a third party security management system. These policies allow for a capture and replay of high-integrity data that enables threat analysis.

主权项

1. One or more tangible computer-readable storage media encoding computer-executable instructions for executing on a computer system a computer process, wherein the computer-readable storage media is not a carrier wave or propagating signal and the computer process further comprises:
intercepting network traffic of an enterprise network directed to a target destination; replaying the intercepted network traffic outside of the enterprise network to an end destination other than the target destination.