News
Narus Develops New Forensics Software for Tier-one Carrier-class Networks Enabling Reconstructed Analysis of Captured Internet Traffic
Software Provides the Ability for Network Operators to Visualize Captured Data in the Exact Manner in Which it Was Sent or Received
February 15, 2005-Mountain View, CA—Narus, Inc., the leading carrier-class IP platform software provider, announced NarusForensics®, a full IP session reconstruction and visualization tool. With NarusForensics, Web-page reconstruction, playback of VoIP traffic, and e-mail reconstruction are all possible; enabling forensic analysis of anomalous and lawfully intercepted traffic. NarusForensics provides the ability for network operators to visualize captured data in the exact manner in which it was sent or received, allowing carriers to provide a level of service above the competition, improving customer service and eliminating unnecessary downtime.
Feeding NarusForensics, is Narus Directed Analysis which provides a flexible, targeting component designed to surgically capture traffic around a specific event, anomalous behavior or specific computer. Among the possible targeting criteria are client identity, server identity, protocol, network link, and for less-granular targeting BurstMode. NarusForensics can assist in the analysis of anomalous events such as zero day attacks, worms, DDoS attacks, intrusions and other network misuses and abuses. NarusForensics and Narus Directed Analysis are currently deployed in Tier-1 Carrier-Class networks around the world including Asia and EMEA. NarusForensics combined with the Narus IP Platform, provides unsurpassed flexibility and is easily integrated with existing and future applications.
Flexibility and Visualization
The visualization component of NarusForensics is used to reconstruct application sessions and comes standard with a full suite of protocol parsers that not only focus on common protocols like HTTP, email and VoIP, but also include Intranet Protocols for databases and file systems.
“Detailed forensic analysis is a requirement for Tier-1 Carriers as they address network security issues and regulatory needs across multiple networks,” said Jay Thomas, vice president of product marketing at Narus. “Narus Directed Analysis provides carriers with intelligence for choosing target criteria and the precise capture of IP data for analysis. NarusForensics allows them to visualize captured data in the exact manner in which it was sent or received. Combined, these two products eliminate the issues caused by bulk dumping of data, including unmanageable volumes of data, costly post-processing and the challenge to actually see the important data.”
The Narus High Speed Analyzers collect network traffic passively, in real time and directly off the wire at carrier speeds from 100bt to OC48.
NarusForensics can easily be integrated with NarusView and Narus Traffic Anomaly Detection as well as multiple network applications and service providers realizing efficiencies. Narus will be demonstrating its suite of NarusForensics and Directed Analysis applications at RSA 2005 in San Francisco, CA, February 15-17 at Narus' booth, #1121.
# # #
About Narus, Inc.
Narus software solutions provide the real-time traffic insight essential to profitably manage, secure and deliver Services over IP. Today, large IP-based networks are transforming the traditional circuit-switched world of telecommunications into a dynamic, ever-changing world of IP-based services such as VoIP, IPTV and others. In order to secure, monitor, bill and provide excellent quality of service for these IP-based offerings, service providers must simultaneously capture, normalize and correlate IP traffic across all layers of the network. Only NarusInsight is capable of providing companies with the means to capture, normalize and correlate IP traffic at the speed required for carrier-class networks. With its patented technology and processes, Narus helps customers like AT&T, Korea Telecom, KDDI, Telecom Egypt, Saudi Telecom, France Telecom and T-Mobile in areas of network security, traffic classification and monitoring.
Media Contact
Susannah BeckwithSchwartz Communications
T: +1 415 512 0770
