ARGOS Network Traffic Visualization Tool

1
ARGOSNetwork Traffic Visualization Tool

• by Team 1
• presented by Ben Kaap

2
Overview

• What is Argos?
• Why use Argos?
• A sneak peek
• Where are we going now?

3
What is Argos?

• Traffic Monitor
• Protocol Parser
• TCP
• 802.11b
• Visual Troubleshooting Tool
• Side-by-Side log comparisons
• Problem area identification

4
Why use Argos?

• 00055DDAACA800055DDAACA800F56043355B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  18530200380000003800000080000000FFFF
• 00055DDAACA800055DDAACA810F5EBD1365B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  45E30300380000003800000080000000FFFF
• 00055DDAACA800055DDAACA820F51D62385B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  DB740500380000003800000080000000FFFF
• 00055DDAACA800055DDAACA830F5B1F3395B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  95040700380000003800000080000000FFFF
• 00055DDAACA800055DDAACA840F566833B5B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  FE920800380000003800000080000000FFFF
• 00055DDAACA800055DDAACA850F5CE113D5B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  03240A00380000003800000080000000FFFF
• 00055DDAACA800055DDAACA860F5D6A23E5B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  0EB30B00380000003800000080000000FFFF
• 00055DDAACA800055DDAACA850F5CE113D5B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  03240A00380000003800000080000000FFFF
• 00055DDAACA800055DDAACA860F5D6A23E5B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  0EB30B00380000003800000080000000FFFF
• 00055DDAACA800055DDAACA870F5DE31405B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  AE420D00380000003800000080000000FFFF
• 00055DDAACA800055DDAACA880F57CC1415B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  17D30E00380000003800000080000000FFFF
• 00055DDAACA800055DDAACA890F5E351435B25000000640001
  0000036F6A63010482840B1603010B050400010000F90F9B3F
  062101000380000003800000080000000FFFF
• 00055DDAACA800055DDAACA800F56043355B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  18530200380000003800000080000000FFFF
• 00055DDAACA800055DDAACA810F5EBD1365B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  45E30300380000003800000080000000FFFF
• 00055DDAACA800055DDAACA820F51D62385B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  DB740500380000003800000080000000FFFF
• 00055DDAACA800055DDAACA830F5B1F3395B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  95040700380000003800000080000000FFFF
• 00055DDAACA800055DDAACA840F566833B5B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  FE920800380000003800000080000000FFFF
• 00055DDAACA800055DDAACA850F5CE113D5B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  03240A00380000003800000080000000FFFF
• 00055DDAACA800055DDAACA860F5D6A23E5B25000000640001
  0000036F6A63010482840B1603010B050400010000F80F9B3F
  0EB30B00380000003800000080000000FFFF

5
Why use Argos?

• Debugging
• More useful than Ethereal or TCPDump
• Debugging
• More big picture than Kismet
• Debugging
• More powerful than a speeding locomotive

6
A sneak peek
7
Where are we going now?

• Development Tailoring to Client
• Extend Usability
• Pre-parsing add-on
• Possible API (Application Programming Interface)

8
Questions, Comments, Queries, Objections,
Problems, Protests, Inquiries, Proposals,
Suggestions, Ideas, Hints, Tips, or Tricks?