Date Added: Jun 2012
Network Forensics is scientifically confirmed techniques to collect, detect, identify, examine, correlate, analyze, and document digital evidence from multiple systems for the purpose of finding the fact of attacks and other problem incident as well as perform the action to recover from the attack. Network Forensic measures the success of unauthorized activities meant to disrupt, corrupt, and or compromise system components as well as providing information to assist in response to or recovery from these activities. In this paper, the authors designed a Linux based Network Forensic system in which contented virtual honeynet system to solve the information gathering in the past. This system is totally based on traditional server honeypot.