D 2021

PCAPFunnel: A Tool for Rapid Exploration of Packet Capture Files

UHLÁR, Juraj; Martin HOLKOVIČ a Vít RUSŇÁK

Základní údaje

Originální název

PCAPFunnel: A Tool for Rapid Exploration of Packet Capture Files

Autoři

UHLÁR, Juraj; Martin HOLKOVIČ a Vít RUSŇÁK

Vydání

United States of America, 2021 25th International Conference Information Visualisation (IV), od s. 69-76, 8 s. 2021

Nakladatel

The Institute of Electrical and Electronics Engineers, Inc.

Další údaje

Jazyk

angličtina

Typ výsledku

Stať ve sborníku

Stát vydavatele

Spojené státy

Utajení

není předmětem státního či obchodního tajemství

Forma vydání

elektronická verze "online"

Odkazy

URL

Označené pro přenos do RIV

Ano

Kód RIV

RIV/00216224:14610/21:00121642

Organizace

Ústav výpočetní techniky – Masarykova univerzita – Repozitář

ISBN

978-1-6654-3827-8

ISSN

DOI

https://doi.org/10.1109/IV53921.2021.00021

UT WoS

000850000500011

EID Scopus

2-s2.0-85118439731

Klíčová slova česky

Datová analýza; vizualizace dat; analýza síťového provozu; záchyty paketů

Klíčová slova anglicky

Data analysis; Data visualization; Network traffic analysis; Packet captures

Návaznosti

EF16_019/0000822, projekt VaV.
Změněno: 31. 3. 2023 04:06, RNDr. Daniel Jakubík

Anotace

V originále

Analyzing network traffic is one of the fundamental tasks in both network operations and security incident analysis. Despite the immense efforts in workflow automation, an ample portion of the work still relies on manual data exploration and analytical insights by domain specialists. Current state-of-the-art network analysis tools provide high flexibility at the expense of usability and have a steep learning curve. Recent---often web-based---analytical tools emphasize interactive visualizations and provide simple user interfaces but only limited analytical support. This paper describes the tool that supports the analytical work of network and security operators. We introduce typical user tasks and requirements. We also present the filtering funnel metaphor for exploring packet capture (PCAP) files through visualizations of linked filter steps. We have created PCAPFunnel, a novel tool that improves the user experience and speeds up packet capture data analysis. The tool provides an overview of the communication, intuitive data filtering, and details of individual network nodes and connections between them. The qualitative usability study with nine domain experts confirmed the usability and usefulness of our approach for the initial data exploration in a wide range of tasks and usage scenarios, from educational purposes to exploratory network data analysis.
Zobrazeno: 2. 5. 2026 22:33