www.netfort.com

Do You Really Know What Is Going In And Out Of Your Network.

Darragh Delaney

www.netfort.comSlide 2

• The common use case which keeps coming up when we visit customers is that IT managers within these organisations want to know what is going on within their networks.

Common Problem

www.netfort.comSlide 3

• This is what is at the heart and soul of NetFort; we continue to develop LANGuardian so you can find out what users are doing on your network.

• A good example of why this is important is related to the potential issue discovered recently where LG televisions were transmitting user data out of their home networks.

Why choose NetFort for monitoring?

www.netfort.comSlide 4

LANGuardian Overview

• LANGuardian helps network administrators to:– Classify network traffic by application and by user– Troubleshoot bandwidth issues right across the network– Perform network or user forensics on past events– Investigate activity on Windows file shares,– Keep track of user activity on the Internet.

LANGuardian is a deep packet inspection software for investigating, monitoring and reporting on network activity.

www.netfort.comSlide 5

Why is this so important – LG Case study

• It was discovered in November of last year that LG TV’s were transmitting user data out of their home networks.

• What is also interesting about the LG article is the means by which the issue was discovered. Wireshark was used to do deep packet inspection.

www.netfort.comSlide 6

LG Case study

• Some vendors will suggest that SNMP or even flow (NetFlow, sFlow and others) tools will provide visibility on a network. In some cases they may provide okay levels of visibility in most however they fall well short. This is because they don’t work out what applications are in use and they don’t look at packet payloads

www.netfort.comSlide 7

Do other TVs transmit data?

• I have a Sony smart TV which is connected to the Internet and I switched it on while I was monitoring its traffic with my LANGuardian.

• The screenshot on the next page is from a forensics search where I focused in on the IP address of the television. Even without using any of its smart features it’s connecting to outside services. Most traffic is via HTTP but some is also sent encrypted by HTTPS.

www.netfort.comSlide 8

LG Case study

www.netfort.comSlide 9

LG Case study

• Drilling down further reveals lots of connections to playstation.net. I did not spot anything sensitive as was shown with the LG story but I am going to keep a close eye on this just to make sure.

www.netfort.comSlide 10

Importance of DPI

• What all this shows is that if you really want to find what is going in and out of your network you need deep packet inspection.

• You can try our DPI software free for 30 days by clicking on the link below.

Download LANGuardian Now!

www.net for t .com