KFSensor Manual

Overview

This section describes each component of the KFSensor system and how to use them.

KFSensor Monitor

The KFSensor Monitor is a module that provides the user interface to the KFSensor system.
With it you can configure the KFSensor Server and examine the events that it generates.

Views

The main window of the KFSensor Monitor comprises of several different views.

• Ports View
  
• Visitors View
  
• Events View
  

Menus

Each menu option is described here, together with links to the different dialog boxes that can be accessed from the menus.

• File Menu
  
• View Menu
  
• Scenario Menu
  
• Signatures Menu
  
• Settings Menu
  
• Help Menu
  

KFSensor Server

The KFSensor Server provides the core functionality of the KFSensor system. It listens to both TCP and UDP ports on your machine and interacts with visitors and generates events. The KFSensor Server has no user interface and runs in the background.

• Running the KFSensor Server
  

KFSensor Reports

KFSensor Reports contains a variety of reports for advanced data analysis. The reports are provided via a web based HTML interface via a browser. The reports are hosted on a special web site local to the KFSensor machine. They can be accessed via the View -> Reports menu option, or the graph button on the toolbar.

KFSensor On-Line Manual Contents