An unauthorized network scan may be detected by parsing network sniffer data for:
IP traffic from a single IP address to multiple IP addresses.
IP traffic from a single IP address to a single IP address.
IP traffic from multiple IP addresses to a single IP address.
IP traffic from multiple IP addresses to other networks.
Submit