Posts by Darragh Delaney:

NetFort Blog

Importing Database Archives

If you want to analyse network traffic data that is no longer available online and if you have backup enabled, you can import archived data back into a LANGuardian reader...

3 Apr 2019

How To Determine What Ports Are Active On A Server

Active Server Ports I spent most of last week on the road visiting customers. Many of them were working on projects to reduce the number of physical servers hosted in...

5 Mar 2019

DNSpionage. A DNS Server Hijacking Attack

Monitoring DNS requests so as to detect DNSpionage attacks

What is DNSpionage? Late last year, Cisco Talos discovered a DNS hijacking attack targeting Lebanon and the United Arab Emirates (UAE) affecting .gov domains, as well as a private Lebanese...

21 Feb 2019

Internet Traffic Monitoring,NetFort Blog

How to open a Remote (ssh) Support Tunnel for the NetFort Support Team

We always advise our customers to open a Secure SSH tunnel for NetFort Support. This way, if you need any assistance at any time we can jump straight onto your...

20 Feb 2019

NetFort Tips & Tricks – How to exclude some of your network traffic from LANGuardian monitoring

A customer recently contacted us with a situation: "We have an IP camera system and our security department is constantly monitoring the feeds, this is traversing the network and as a...

20 Feb 2019

How do I add a remote sensor to our central manager?

All LANGuardian systems (Standalone, Central Managers and Sensors) are built using the same software, but they are configured and licensed in different ways. To create a Central Manager and Sensor...

20 Feb 2019

How do I apply my new LANGuardian License?

Please note that the license text file has a file name similar to <netfort-license-xxxx-xxxx-xxxx-xxxx>.txt. To apply your new LANGuardian license, please follow these steps: If the old license has expired : Download and...

20 Feb 2019

Using Brocade switches – and need to monitor internal network activity. Is VLAN monitoring supported?

We have great news about the Brocade ICX 7750 switches! VLAN monitoring is now supported. Check out the ICX7750 web site for the: Specific V-LAN Mirroring page of layer 2...

20 Feb 2019

Configuring a SPAN session on Nexus 7000

Here is an example of a SPAN configuration for a Nexus 7000 switch. In my case of the command below, I am monitoring more than 1 vlan. In configuration mode:...

20 Feb 2019

Can I monitor Oracle VM VirtualBox activity?

By following the steps outlined below, you can easily create a LANGuardian image on a VM VirtualBox which will allow you monitor the traffic passing in and out of the...

20 Feb 2019

Problem configuring SPAN port on Nexus 7700

A LANGuardian customer recently contacted us with an interesting solution for their complex core switch. They could not seem to set Ethernet 1-2/1/12 as a SPAN port, the customer told...

20 Feb 2019

How do I set up port mirroring on my Avaya ERS/Nortel Baystack 5xxx series switch using CLI?

We found this to be a good guide on how to set up port mirorring on this switch. http://www.oleksiygayda.com/2009/10/h...

20 Feb 2019

I can’t access the LANGuardian, HELP!

LANGuardian can be accessed using a web based management system. You can access this from any web browser by entering https://"The IP address you assigned to the LANGuardian." You will be asked...

20 Feb 2019

NetFort Tips & Tricks – How to add a NetFlow sensor to LANGuardian

Many of our customers have been asking how to add a NetFlow sensor to LANGuardian, here are the steps you should follow: 1. Click on LANGuardian's menu bar and select Sensors....

20 Feb 2019

Network Security Monitoring Tools Need Traffic For Context

What are network security monitoring tools? Network Security Monitoring is the collection, analysis, and escalation of indications and warnings to detect and respond to intrusions on computer networks. Network security...

11 Feb 2019

Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

How to Alert on Rogue DHCP Servers

Detecting rogue DHCP servers using network traffic

Alert on Rogue DHCP Servers Using Network Traffic as a Data Source Recently a customer came to us with the following query: "We were wondering whether there is a way...

7 Feb 2019

Announcing NetFort LANGuardian 14.5. A look at the new features

LANGuardian 14.5 NetFort is delighted to announce the availability of our latest LANGuardian release, V14.5. “One of our objectives is to ensure that our customers always have ‘eyes on their...

18 Jan 2019

NetFort News

How to Detect RYUK Ransomware on Your Network

What is RYUK Ransomware? An advisory from the US based Department of Health and Human Services notes that attacks involving RYUK appear to be targeted. In fact, its encryption scheme is...

19 Dec 2018

Ransomware Detection,NetFort Blog

Passive capture of usernames from RADIUS traffic

What is RADIUS? RADIUS stands for Remote Authentication Dial In User Service. A RADIUS server can support a variety of methods to authenticate a user. When it is provided with...

18 Dec 2018

Beware of Exposed Ports at Your Networks Edge

More reasons to check inbound traffic on your network Looking though the latest infosec news this week I spotted two exploits which use similar attack methods. Printers targeted via TCP...

4 Dec 2018

Internet Traffic Monitoring,Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

Extracting Metadata From PCAP Files

What our customers want to extract from PCAP files In my previous blog post on the topic of PCAP file management, I looked at how you can import and export...

3 Dec 2018

PCAP File Analysis and Extraction Using LANGuardian

Working With PCAP Files PCAP or packet capture files can be extracted from the network by using applications such as Wireshark or exporting them from network devices such as firewalls....

23 Nov 2018

NetFort Blog

What Traffic Reports To Focus on if You Are Dealing With Google Unusual Traffic Notifications

Why does Google sometimes show unusual traffic messages? Recently I worked with a number of network managers who downloaded our LANGuardian software to try and find the source of malware...

16 Nov 2018

Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

5 Tips For Monitoring Network Traffic on Your Network

Monitoring traffic on your network is important if you want to keep it secure and running efficiently. The information obtained by network traffic monitoring tools can be used in multiple...

15 Nov 2018

Internet Traffic Monitoring,Network Security Monitoring,Network Traffic Monitoring,NetFort Blog

Video – Tracking Mobiles Devices on Your Network

Tracking Mobile Devices on Your Network In this video we look at how you can monitor mobile devices on your network using LANGuardian. LANGuardian is deep-packet inspection software that monitors...

15 Nov 2018

Network Traffic Metadata – Four Recent Customer Use Cases

Network Traffic Metadata – Four recent customer use cases The rising popularity of network traffic metadata is because it's in the sweet spot between full packet capture like Wireshark and...

7 Nov 2018

We Are Hiring – Senior Software Engineers

DESCRIPTION At NetFort, we design and develop software that analyzes network traffic using deep packet inspection techniques to give our customers a unique level of internal visibility, including user activity,...

26 Oct 2018

NetFort News

Employees Leaving? Need an Audit Trail?

Getting an audit trail when employees leave

Users Leaving? How to get an audit trail Network users come and go. When new employees start we create sign on accounts and assign any relevant permissions. When employees leave...

3 Oct 2018

Detecting Inbound RDP Activity From External Clients

What is RDP? (Remote Desktop Protocol) RDP is a proprietary protocol developed by Microsoft. It provides a user with a graphical interface to connect to another computer over a network...

19 Sep 2018