Hello everyone in this video. We will first learn what network
traffic analysis is and we will describe the
purpose of the NTA lastly. I will tell
you the phases of the NDA. Let's get started.
What is Network traffic analysis?
Network traffic analysis is the process of collecting analyzing
and interpreting data about the
traffic following 2 and network. It involves
my touring the traffic on a network and analyzing the
data to identify patterns Trends and
animals.
And to understand how the network is
being used.
Network traffic analysis can be used to identify security
threats optimize Network performance
and terrible shoot issues
What is the purpose of analyzing Network traffic the primary
purpose of network traffic analysis is
to understand how the network is being
used and to identify any issues
or potential problems.
Network traffic analysis can be used for several purposes
first one is security network traffic
analysis can help identify security threats
such as malware infections or unauthorized
access tense. It can
also be used to monitor for unusual or suspicious activity
on the network.
Second one is performance optimization by
analyzing Network traffic patterns. It
is possible to identify button next and
other issues that may be impacting Network performance. This
can help network administrators optimize
the network for better performance.
And third one is troubleshting Network traffic
analysis can help identify the root
cause of network issues such as
slow performance or connectivity problems.
And fourth one is compliance in some
Industries. There are regulations that require organizations
to Monitor and analyze their Network
traffic for compliance purposes.
And fifth terrific management Network traffic
analysis can be used to identify patterns in
network usage and help organizations manage
their bandwidth and resources more
effectively.
And the last one business intelligence by analyzing
Network traffic data organizations can
gain insights into how their network
is and of their network is
used which can be useful for making business decisions.
Overall. The purpose of
network. Traffic analysis is to help ensure that
a network is running smoothly efficiently and resolve
any issues that may arise
they would need to apply our knowledge of
normal Network traffic within our Zone to
detect malicious activity.
This will help us restrict our search and swiftly
discover and prevent her style communication.
For example, if you get a lot
of syntacts on ports that we never or
sell them used on our Network we may
guess that someone is attempting to figure out
what ports are open on our hosts.
This type of behavior is typical of
a port scan.
Let's talk about anti-phasis. What are
the phases of network traffic analysis? There are
generally four phases of network terrific analysis.
The first phase is data collection and inspection to
do this. We will capture the traffic.
The first step in network traffic analysis is to collect
data from the network.
This can be done using a variety of tools and techniques such
as packets nothing low analyzes
and network tabs.
Packets anything involves capturing and analyzing
individual packets of data is the travel
across the network packets contain a
heater and a payload and the heater
contains information about the source and destination
of the packet as well as other metadata flow
analysis involves combining
packets into logical flows and analyzing
patterns in the data flows are
groups of packets that are related to a particular communication
between two devices and flow analysis
can help identify Trends and
anomalies in the data.
Network types and probes are Hardware devices
that can be placed on a network to capture and
analyze traffic.
Network tabs allow traffic to pass through them
and can be used to monitor live traffic while
probes can be inserted into a network
to capture traffic for offline analysis.
And once the data has been collected. It must
be inspected to identify patterns and Trends
this may involve investigating the
structure and content of packets to
understand how different Protocols are being used on
the network or combining data
into flows to identify patterns in data.
Protocol analyzers are specialized to
State can decode and display the contents
or packets in a human readable format?
Protocols are standardized sets of rules that
Define how devices communicate with each other over and
network and protocol analysis can help
understand how different Protocols are being
used on the network and identify any
issues or enemies.
And in the next phase we will make a data
preprocessing.
Before the data can be analyzed. It may need
to process to remove any noise or errors and
prepare it for analysis. This may
involve filtering out irrelevant data normalizing data
values or combining data into more meaningful
units.
Filtering out irrelevant data can help Focus the
analysis on the data that is most relevant
to the goals of the analysis while normalizing data
values can help make the data more
comparable and easier to analyze.
Combining data into more meaningful units such as
flows or sessions can also make the
data easier to analyze and understand.
In the analysis phase the data is investigating in
more detail to understand the behavior of devices
users and applications on the network.
This may involve using statistical analysis techniques
visualizing data in charts and
graphs or applying machine learning algorithms to
identify patterns and trends
Network analyzers are software tools that
can be used to capture and analyze traffic and display
the data in a variety of formats.
These tools often have a graphical user interface and
can display traffic data in the form of charts tables
and graphs.
The Final Phase of network traffic analysis
involves presenting the results of the analysis in
a clear and concise manner this may
involve creating reports graphs or other
visualizations to communicate the findings to
stakeholders. The results of the analysis can
be used to identify security threats optimize Network
performance troubleshoot network
issues or make informed business decisions.
By understanding the behavior of devices users and
applications on the network organizations can
take proactive steps to improve
security performance and compliance and
make more informed business decisions.
So that's all for now. See you on the
next video.