COMP6348 Network Forensics – Week 4

Some of the things we learned about this week are :

  • We learned about flow analysis. Flow itself refers to the act of sending a group of packets from a source to a certain destination. Flow analysis, is simply an analysis to find patterns and suspicious activities on the flow itself.
  • The difference between unicast, anycast, and multicast.
  • Some tools used when conducting a flow analysis includes, WireShark, TShark, TcpFlow, PcapCat, etc.

This entry was posted in Courses Related. Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *