https://docs.mitigator.ru/v26.04/en/tags/ips/ Recent content in Ips on BIFIT Mitigator Hugo -- gohugo.io en https://docs.mitigator.ru/v26.04/en/psg/psg-analysis/multipurpose/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.04/en/psg/psg-analysis/multipurpose/ Multipurpose Analyzer analyzes L3/L4 headers and L4 payload. Traffic dumps in PCAP or PCAPNG formats are accepted as input. Multipurpose Analyzer capabilities: Generate signatures for L4 payload in various ways. Create visualization of the contents of the dump. It can be useful for understanding the traffic structure, as it allows you to visually identify patterns in it. Create a longogram — an image showing the distribution of packet sizes by their number over a certain time interval. https://docs.mitigator.ru/v26.04/en/psg/psg-analysis/ip-lists/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.04/en/psg/psg-analysis/ip-lists/ IP Analyzer analyzes lists of IPv4 addresses, providing a extended set of data for each address in the list. Only unique IP addresses are included in the analysis. Checks: IP addresses presence in reputation lists; compliance with GeoIP databases. If the list contains a prefix from /16 to /32, then it is decomposed into separate IP addresses. You can analyze: A text file with a list of entries separated by comma, space, semicolon, line break. https://docs.mitigator.ru/v26.04/en/kb/ss-feeds/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.04/en/kb/ss-feeds/ The MITIGATOR team generates regularly updated reputational lists of IP addresses, autonomous systems and JA3 fingerprints (hereinafter referred to as “feeds”). Feeds can be imported into MITIGATOR as named lists and used in countermeasures and routing rules. To do this you need to specify Mitigator feeds as a source type. To do this, specify Mitigator feeds as the named list source type and select the required feed. Feeds cannot be downloaded or viewed, even through the MITIGATOR Web interface.