|
Packet Highlight System displays zero-day attack packet information and raw data of the packet matched with new rule for users to check.
ZAPHP Parsing Part parses ZAPDP after receives it.
After then, ZAPHP Parsing Part sends information for matching raw data detected in zero-day attack from full packet matched with new rule to Data Matching Part. Also, it sends sid, timestamp to Output Part.
Data Matching Part sends matched result to Output Part after it compares payload of full packet and received information.
Output Part displays information which is received from ZAPHP Parsing Part and Data Matching Part.
So, users can conform information about zero-day packet, rule and matched raw data.
|