Knoppix NSM 1.2

Knoppix-NSM 1.2Origin:Category: ForensicsDesktop environment: FluxboxArchitecture: x86Based on: KnoppixWikipedia:Media: Live CDThe last version | Released: 1.2 | May 9, 2007Knoppix-NSM – a modified version of the Knoppix LiveCD, focused on network security monitoring.Knoppix-NSM is not a preventative tool and does not focus on vulnerabilities.It contains many very useful tools for detective network analysis, such as:– Sguil to detect this network activity– Basic Analysis and Security Engine (BASE) NSM for network monitoring and showing the port scan as well– the following scans can by ran: FIN, XMAS, NULL, Operational– Ntop to view statistical network data using – this can alert you to abnormal network such as 95% of all traffic being UDP packets.