The flow record and flow-record processing systems (FRPS) 

A flow record is the metadata information about flow on the network. Consider a scenario where an infected system is talking to the attacker's system and has uploaded two documents of 5 MB each to the attacker's system. In such cases, the flow record will contain information such as the IP addresses of both the compromised host and the attacker system, port numbers, date and time, and the amount of data exchanged, which in this case would be around 10 MB.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset