Network Analysis of Students' Online Activities via Port mirroring Switch Port Analyzer

Kassim, Murizah; Mahmud, Abd Razak; Ramli, Muhammad Amirullah; Rahman, Ruhani Ab

doi:10.1109/iscaie54458.2022.9794504

Cited by 9 publications

(5 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

Section: Literature Studymentioning

confidence: 99%

“…The use of Port Mirroring is a special system prepared to monitor traffic on a port. At Cisco, the Switched Port Analyzer (SPAN) is a special method that can be used to perform port mirroring[10].Intrusion Detection System or IDS is a system that can detect suspicious activity on a system or network. If suspicious activity is found in network traffic, the IDS will provide a warning to the system or network administrator carry out analysis and look for evidence of attempted intrusion.…”

mentioning

confidence: 99%

See 1 more Smart Citation

Development of a Notification-Based Network Security Monitoring System Using Network Development Life Cycle (NDLC)

Butarbutar,

Sasmita,

Pratama

2023

jitter

View full text Add to dashboard Cite

Developments in information and communication technology which are increasing rapidly, it is also required to improve the quality of security. The increase of internet usage has led to high number of intrusions or attacks that exploit weaknesses in internet protocols, operating systems and application software. Due to the high number of attacks, information technology security is an important thing to consider in an organization or individual. One solution that can be applied to overcome this problem is to monitor network security. One of the implementations of network security monitoring is the implementation of an Intrusion Detection System (IDS). The purpose of this research was to design a Snort-based network security monitoring system as a tool for implementing IDS to detect attacks by sending notifications via Telegram Bot which is integrated with the server owned by Unit Sumber Daya Informasi Universitas Udayana using the Network Development Life Cycle (NDLC) method. Based on the configuration results of research conducted on the Unit Sumber Daya Informasi Universitas Udayana server, there was the lowest data on May 16, 2023 with 64,418 data and the highest data on April 04, 2023 with 261,672 data and 2 Nmap Scan attack data as the lowest type of attack and 13,703 DDoS attack data as the highest type of attack.

show abstract

Section: Literature Studymentioning

confidence: 99%

mentioning

confidence: 99%

Development of a Notification-Based Network Security Monitoring System Using Network Development Life Cycle (NDLC)

Butarbutar,

Sasmita,

Pratama

2023

jitter

View full text Add to dashboard Cite

show abstract

“…Untuk bisa menangkap packet/frame komunikasi ini maka port yang digunakan oleh laptop untuk monitoring komunikasi client server IEC 61850 harus disetting sebagai mirroring dari port ethernet switch dari peralatan SOGI yang akan dimonitor. Port mirroring digunakan untuk mencerminkan paket jaringan dalam lalu lintas jaringan ethernet dan jaringan ethernet dipantau dan dianalisis menggunakan perangkat lunak sniffer Wireshark [15]. Gambar 6.…”

Section: Metode Penelitianunclassified

Penggunaan Software Wireshark untuk Monitoring dan Troubleshooting pada Komunikasi Client Server IEC 61850

Said Al Manshury

2023

ECT

View full text Add to dashboard Cite

Pengiriman data (status, pengukuran, kontrol) antara Sistem Otomasi Gardu Induk (SOGI) berbeda dengan Gardu Induk Konvensional. GI Konvensional menggunakan kabel (hardwired) untuk mengirimkan data, sedangkan pada SOGI pengiriman data menggunakan komunikasi data via jaringan ethernet yaitu dengan menggunakan protokol IEC 61850. Protokol IEC 61850 saat ini banyak digunakan untuk komunikasi di dalam Gardu Induk. Saat ini SOGI sudah banyak diterapkan di PLN, di mana protokol IEC 61850 adalah protokol mandatory yang digunakan dalam SOGI. SOGI terdiri dari berbagai macam peralatan seperti : server, gateway, Intelligent Electronic Device (IED). Dalam pemeliharaan SOGI perlu dilakukan monitoring dan troubleshooting komunikasi IEC 61850 untuk memastikan data (status, pengukuran, kontrol) terkirim antar peralatan tersebut. Salah satu komunikasi IEC 61850 yang sering digunakan diantara adalah komunikasi client server (report). Untuk memonitor komunikasi IEC 61850 tersebut dibutuhkan IEC 61850 protocol analyzer seperti IED scout dari Omicron, IEC 61850 Test Suite Pro dari Trianglemicroworks, IEC 61850 Protocol Test Tool dari Ase systems atau IEC 61850 protocol analyzer yang lainnya. Semua protocol analyzer tersebut berbayar, sedangkan tidak semua unit PLN memiliki software protocol analyzer tersebut. Salah satu software alternatif yang bisa digunakan adalah wireshark, software ini gratis dapat digunakan untuk monitoring semua komunikasi yang berbasis ethernet, termasuk protokol IEC 61850. Dalam pengujian yang dilakukan dalam penelitian ini, dapat disimpulkan bahwa wireshark dapat digunakan untuk monitoring komunikasi IEC 61850 dengan menggunakan filter “mms” dan laptop untuk monitoring terpasang pasa port ethernet switch yang sudah di mirroring ke port peralatan SOGI yang berkomunikasi lewat komunikasi client server IEC 61850.

show abstract

“…At the Ethernet switch, a SPAN port was configured for traffic monitoring, as we had to capture the traffic from several devices over the house at the same time. This configuration approach is widely used and an example of the traffic mirroring application for conducting a traffic study can be found in [21]. We captured traffic with TShark 2.6.20, a command-line network protocol analyzer, installed on the mini-PC running Ubuntu Linux, which we connected to the SPAN port of the Ethernet switch.…”

Section: Setup Descriptionmentioning

confidence: 99%

VR Traffic Dataset on Broad Range of End-User Activities

Polupanova

2023

Data

View full text Add to dashboard Cite

With the emergence of new internet traffic types in modern transport networks, it has become critical for service providers to understand the structure of that traffic and predict peaks of that load for planning infrastructure expansion. Several studies have investigated traffic parameters for Virtual Reality (VR) applications. Still, most of them test only a partial range of user activities during a limited time interval. This work creates a dataset of captures from a broader spectrum of VR activities performed with a Meta Quest 2 headset, with the duration of each real residential user session recorded for at least half an hour. Newly collected data helped show that some gaming VR traffic activities have a high share of uplink traffic and require symmetric user links. Also, we have figured out that the gaming phase of the overall gameplay is more sensitive to the channel resources reduction than the higher bitrate game launch phase. Hence, we recommend it as a source of traffic distribution for channel sizing model creation. From the gaming phase, capture intervals of more than 100 s contain the most representative information for modeling activity.

show abstract

Network Analysis of Students' Online Activities via Port mirroring Switch Port Analyzer

Cited by 9 publications

References 11 publications

Development of a Notification-Based Network Security Monitoring System Using Network Development Life Cycle (NDLC)

Development of a Notification-Based Network Security Monitoring System Using Network Development Life Cycle (NDLC)

Penggunaan Software Wireshark untuk Monitoring dan Troubleshooting pada Komunikasi Client Server IEC 61850

VR Traffic Dataset on Broad Range of End-User Activities

Contact Info

Product

Resources

About