LANDER Trace Software

LANDER Trace Software

LANDER Trace Capture software handles for packet capture, scrubbing, and triggering user-provided scripts. It supports multiple levels of data sensitivity, with different levels of anonymization and scrubbing (payload removal). It support multiple users of the data stream, potentially each with varying computational needs. We currently use lander to process several datatypes: packet headers, full packets, flow data (typically Argus format), and DNS data.