A network management model of network forensics equipment based on udt reverse penetration technology

Abstract

The present invention proposes a network management model of network evidence collection equipment based on UDT reverse penetration technology. The network management server of the network establishes a connection, so that the network forensics device has the function of communicating with the external network device without the external network IP address, and then the management terminal can remotely manage the network forensics device without the external network IP address, that is to say It can allow a machine to access a device without an external IP address, and then pair it with a network management server with an external IP address to realize the function of remote management of this machine. When the network card is not enough or it is not convenient to equip In the case of IP, it is necessary to obtain the connection with the external network, which has potential application prospects.

Description

technical field [0001] The invention relates to the field of computers, in particular to a network management model of network forensics equipment based on UDT reverse penetration technology. Background technique [0002] At present, network forensics technology has achieved great development in our country. Network forensics is mainly based on certain methods and network core routing communication data forensics system to obtain some illegal network behavior and cyber crime evidence of the target object. The entrance of the communication equipment is equipped with temporary detection and evidence collection equipment, which analyzes and monitors the short-term and short-distance network communication behavior of the target object, and then obtains the electronic evidence of the target object's first-hand illegal network activities and behaviors. [0003] At present, if a machine needs to be accessed remotely, the machine must have an accessible external network IP address. ...

AI Technical Summary

Problems solved by technology

[0003] At present, if a machine needs to be accessed remotely, the machine must have an accessible external network IP address. In the prior art, the data packets between the network forensics equipment and the management terminal are transmitted through the external network IP address. , but in the actual forensics work, for some reasons, the forensics equipment does not have an accessible external network IP address, which makes the network management equipment unable to effectively manage and access the forensics equipment, resulting in the failure of the forensics task

Images