Skip Links

Network World

  • Social Web 
  • Email 
  • Close

FBI requests spawn network forensics start-up

Packet Analytics debuts with security tool developed at Los Alamos National Lab
By Ellen Messmer , Network World , 01/21/2008

Start-up Packet Analytics today is announcing a tool for searching aggregated log data to analyze traffic activity between IP-based host computers.

Net/FSE, which stands for Network Forensic Search Engine, is Linux-based server software that provides a Web interface for network managers to easily see an analytical profile of host-to-host activity based on NetFlow router data as well as log information related to the organization’s firewall, intrusion-detection systems and security-information management. (Learn more about Security Information Management products from our Security Information Management Buyer’s Guide

The Net/FSE tool was developed at Los Alamos National Laboratory by Packet Analysis’s co-founders Ben Uphoff and Paul Criscuolo, both former LANL technical staff members.

“If an enterprise already has centralized logging, we can start directly searching that, and we can also act as the data aggregation point,” says Uphoff, vice president of research, about Net/FSE.

The tool was developed at LANL in response to requests from the Federal Bureau of Investigation to provide detail on network activity based on a list of IP addresses related to possible security problems, he adds. The tool is restricted to IPv4 traffic and doesn’t support IPv6.

Packet Analytics regards Splunk and LogLogic as its closest competitors.

Packet Analytics’ goal to commercialize Net/FSE is backed with $100,000 in funding from the Los Alamos National Lab Venture Acceleration Fund, plus $50,000 from Flywheel Ventures, and another $50,000 from an undisclosed angel investor. The start-up says it has one enterprise customer, Los Alamos National Bank, using Net/FSE.

The Santa Fe, N.M.-based start-up, founded last July, has only two employees. To spur interest in Net/FSE, today Packet Analytics will be making the Net/FSE software available for free download to those using it to analyze up to 1 million events per day with limited support, says Andy Alsop, co-founder and CEO.

For use with up to 3 million events per day, the price for Net/NSF would be $1,495 with $299 for support each year with prices of up to $18,900 for the tool and $3,790 for support for use analyzing 50 million events per day.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.

Whitepapers

Advancing the Economics of Networking

Aging network systems and old habits have dictated how businesses spend their IT budgets. As a...

Implementing HA at the Enterprise Data Center Edge to Connect to a Large Number of Branch Offices

This paper reviews the problem of creating a network where the dynamic availability of services is...

Enterprise Data Center Network Reference Architecture

Using a High Performance Network Backbone to Meet the Requirements of the Modern Enterprise Data...

Webcasts

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Stay out of the headlines: Detecting and preventing network intrusions

How do YOU stay out of the headlines? There is no denying that risk exists in our computer-driven...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

IP address management in 2008 - six things to know

Read this Network World Special Brief to learn how Enterprise IT managers must update their...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...