Network traffic analysis and security monitoring with UniMon

This paper introduces an adaptable, flexible and portable network traffic monitor. UniMon (Universal Network Traffic Monitor) is an external and passive network traffic monitor that has been designed in such a way that it can easily be adapted to any type of network and protocols. As a software monitor, UniMon may run on arbitrary workstations within an Ethernet. UniMon aims at offering total network visibility for all the seven ISO/OSI layers and so give a complete analysis of each network packet it captures. UniMon is a suitable tool for network security monitoring and also for network performance monitoring and troubleshooting.