Aequor Tracer – Network Analysis Application

This article presents the principles and algorithms used in our application, which we have developed to analyze network traffic. The two main parts of the application are geolocation service and traffic behavior analysis. Data are collected from NetFlow and PCAP (Packet Capture). For the behavior analysis, we us e our new proposed method using recalculation of traffic to the lifetime domain and clustering algorithm for deciding a similarity of lifelines. For the geolocation, we use an intersection method.