Video Tutorial

Part 2: ARP & ICMP Sweeps - Passive Network Monitoring

With Passive Network Monitoring, administrators have the opportunity to capture network traffic from devices that are not configured or cannot be configured to forward network activity logs. This feature also lets security personnel to catch logs from rogue devices in the network that they might not be aware of.

In this tutorial series, we'll be explaining the passive network monitoring abilities of NXLog Enterprise Edition to capture and log questionable network-related events such as Rogue DHCP Servers replies, unexpected ARP & ICMP Sweeps, and DNS Tunneling.

The im_pcap module of NXLog Enterprise Edition provides support to passively monitor network traffic by generating logs for various protocols.

Build a scalable logging infrastructure

The ultimate log collection and centralization solution

https://nxlog.co/storage/uploads/72108b15-3a5a-464e-a477-c9e1e2277c26/download.svg

Download and try NXLog Enterprise Edition

REQUEST TRIAL

https://nxlog.co/storage/uploads/72108b15-3a5a-464e-a477-c9e1e2277c26/documentaion.svg

See our extended documentation and set up the tool

READ NOW

https://nxlog.co/storage/uploads/4c9a368b-7be5-4569-8344-db5fd6491c40/price-tag.svg

Send us a price inquiry to get a quote

REQUEST OFFER