add: [doc] Started to describe pibs

master
Gerard Wagener 2019-03-28 11:02:05 +01:00
parent 2e71544020
commit b6681bfb0a
1 changed files with 16 additions and 0 deletions

View File

@ -46,4 +46,20 @@
\end{itemize} \end{itemize}
\end{frame} \end{frame}
\begin{frame}[fragile]
\frametitle{Handling TCP SYN scans}
\begin{itemize}
\item Was the IP seen before?
\item Keep a hash table of all encountered IP addresses
\item Consider only IP addresses where the TCP SYN flag is set
\item Insert the IP and the timestamp in the hash table
\item Display new IP addresses
\end{itemize}
\begin{block}{PIBS tool}
\begin{verbatim}
pibs -r pcapfile.cap -b
\end{verbatim}
\end{block}
\end{frame}
\end{document} \end{document}